live-desktop-app-en[.]pages[.]dev

PhishDestroy identifies live-desktop-app-en.pages.dev as a Microsoft-branded phishing domain currently under investigation for generic credential harvesting. This site masquerades as a legitimate Windows desktop portal, aiming to trick users into surrendering Microsoft account credentials through deceptive login interfaces. Cloudflare-hosted infrastructure (IP 172.66.47.63) and Google Trust Services SSL certificates lend false legitimacy, while 4/95 VirusTotal detections indicate it remains undetected by antivirus engines at time of analysis.

This domain was flagged through Cloudflare registrar (172.66.47.63) and shows 4/95 VirusTotal detections as of analysis, suggesting minimal antivirus coverage despite suspicious behavior patterns. The site leverages the legitimate pages.dev subdomain service to host fraudulent Microsoft login replicas, exploiting Microsoft's brand recognition to bypass user skepticism. Technical indicators include the absence of malicious payloads in initial scans, but behavioral analysis reveals high-risk redirection patterns toward credential-stealing forms.

If you visited live-desktop-app-en.pages.dev, immediately audit all Microsoft accounts for unauthorized access and enable multi-factor authentication. Change passwords using a separate device, scan your system with reputable antivirus software, and report the domain to Microsoft's phishing reporting system. Avoid re-entering credentials until independent verification confirms the site's legitimacy, and consider blocking the domain via firewall rules or browser extensions.