MALICIOUS — CRITICAL
فحص التصيد والأمان للنطاق download-help-guide.pages.dev
download-help-guide[.]
PhishDestroy identifies download-help-guide.pages.dev as a brand impersonation phishing domain currently under investigation.
- VirusTotal
- 6/94
- Blocklists
- No stored match
- التوفر
- يمكن الوصول إليها · الوصول مقيد · HTTP 403
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
download-help-guide.pages.dev — يمكن الوصول إليها · الوصول مقيد (HTTP 403). انتحال العلامة التجارية: Coinbase; نوع الاحتيال: Brand Impersonation. ملخص الأدلة: VirusTotal 6/94 (ADMINUSLabs, CyRadar, Fortinet, Kaspersky, LevelBlue); URLScan malicious verdict; PhishDestroy score 73/100. مسجّل النطاق: Cloudflare.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
Evidence Analysis
PhishDestroy identifies download-help-guide.pages.dev as a brand impersonation phishing domain currently under investigation. This domain mimics legitimate download guides, likely targeting users seeking software or media files to steal credentials or deliver malicious payloads. The risk level remains under investigation but demands immediate scrutiny due to its active status and suspicious infrastructure alignment.
This report compiles verified threat intelligence on download-help-guide.pages.dev. VirusTotal currently flags the domain with 6/95 detections, indicating no immediate consensus on maliciousness despite its suspicious nature. The domain resolves to IP address 188.114.96.3 and is registered through Cloudflare, Inc., leveraging Google Trust Services for its SSL certificate. Notably, the domain uses Cloudflare Pages, a legitimate service, which complicates initial suspicion but does not validate its intent. Additional risk factors include its active status and the absence of reported sightings on major blocklists, suggesting this may be a newly deployed or carefully obfuscated threat. The SSL certificate’s issuance by Google Trust Services further underscores the need for caution, as phishers often exploit trusted issuers to bypass user suspicion.
Users interacting with download-help-guide.pages.dev are advised to treat it as a high-risk brand impersonation phishing domain until further investigation confirms otherwise. To mitigate exposure, avoid clicking links or downloading files from this domain, especially those claiming to offer guides or software. Hover over URLs to verify destination domains, and cross-check with official sources before engaging. Security tools such as browser extensions or dedicated phishing domain databases should be updated regularly to flag similar threats. If credentials were entered, change passwords immediately and enable multi-factor authentication where possible. Report this domain to threat intelligence platforms or cybersecurity authorities to aid ongoing investigations.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
نطاق تغطية البيانات12 recorded checks
استخبارات أمن الشبكات
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
الاستخبارات الجنائية الرقمية
التقنيات · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
تحليل VirusTotal
تحليل أداء الموقع
Google PageSpeed Insights — mobile performance audit of download-help-guide.pages.dev · checked Mar 25, 2026
الأدلة والتقارير الخارجيةIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.