live-desktop-homepages[.]pages[.]dev

PhishDestroy identifies live-desktop-homepages.pages.dev as an ACTIVE generic phishing host currently under investigation. This subdomain is designed to mimic legitimate desktop login interfaces, tricking users into surrendering credentials. The threat is classified as generic phishing and remains active at the time of this report.

This domain was flagged by 3 of 95 VirusTotal vendors as of seed 01985e, indicating it has not yet been widely detected by security engines despite its malicious purpose. It is registered through Cloudflare, Inc., resolves to IP 172.66.44.177, and holds a Google Trust Services SSL certificate. The domain is hosted on Cloudflare Pages, leveraging the platform’s infrastructure to evade traditional blocklists.

Users are advised to immediately block access to live-desktop-homepages.pages.dev at the network level and avoid visiting the site. Organizations should update firewall and DNS blocklists to include this domain and its IP. Monitor for any credential reuse related to this phishing campaign. Given the use of a valid SSL certificate and Cloudflare hosting, traditional detection methods may fail—user awareness and proactive blocking are critical to prevent compromise. This domain poses a credible threat and should be treated as hostile until proven otherwise.