acs-4qz[.]pages[.]dev

PhishDestroy identifies acs-4qz.pages.dev as an active generic phishing domain currently under investigation for credential harvesting operations.

This domain, registered through Cloudflare, Inc., leverages Google Trust Services SSL certificates to host a malicious landing page at IP 188.114.96.3. As of discovery seed 09e06c, the domain remains undetected by 0 of 95 VirusTotal vendors, posing elevated risk due to its current evasion of automated detection frameworks. The Cloudflare Pages platform obscures underlying infrastructure, while the Google-issued certificate lends false legitimacy to unsuspecting users.

Technical indicators suggest an ongoing phishing campaign with no confirmed brand impersonation at this stage, though targeting patterns remain under analysis. Current status is classified as active with risk level under investigation. Immediate safety guidance includes blocking IP 188.114.96.3 at network perimeter, flagging ssl:188.114.96.3:443 in TLS inspection policies, and advising end users to avoid visiting acs-4qz.pages.dev. Security teams should monitor for related domains registered after 2024 as this campaign may expand via dynamic Page routes.