app-onyx[.]pages[.]dev

PhishDestroy identifies the domain app-onyx.pages.dev as a generic phishing site currently under investigation for active malicious activity. The threat involves deceptive login portals designed to harvest user credentials or personal data under false pretenses. No specific brand impersonation has been confirmed at this stage, but the domain exhibits red flags consistent with credential harvesting campaigns.

This domain was flagged by 2 of 95 VirusTotal vendors during automated scanning, indicating it remains undetected by mainstream security tools as of the latest assessment. It is registered through Cloudflare, Inc. and resolves to IP address 188.114.96.3. The site operates under a Google Trust Services SSL certificate, which may lend false legitimacy to its appearance. While the exact creation date is unverified, its current active status and low detection rate suggest it is a newly deployed or stealthily maintained threat.

The current status of app-onyx.pages.dev is active and under investigation by PhishDestroy’s threat intelligence team. Users are strongly advised to avoid interacting with this domain, especially submitting any login credentials, personal information, or financial details. If this site appears in unsolicited emails, messages, or links, it should be treated as a high-risk phishing attempt. Use caution: block the domain at the network level, report it to your security provider, and verify any unexpected login prompts through official channels before taking action.