myautochainmedic[.]pages[.]dev

The domain myautochainmedic.pages.dev was created on 21 February 2026 and is currently hosted on Cloudflare’s network (AS13335, United States). DNS resolution points to 172.66.44.244 and the authoritative nameservers are owen.ns.cloudflare.com and raegan.ns.cloudflare.com. The TLS certificate presented is issued by Google Trust Services under the WE1 root, indicating a valid HTTPS endpoint despite the malicious intent. An HTTP request returns a 403 status code, and the only visible page title is “EVM Resolve”, which does not reveal any functional content.

Google Safe Browsing classifies the site as social engineering, and PhishDestroy has already blocked it; it also appears on a single external blocklist. VirusTotal analysis shows that 11 of 93 scanning engines flagged the domain, reinforcing the phishing assessment. Gridinsoft assigns a trust score of 0 / 100, and the overall risk rating is high. The identified scam type is credential phishing, targeting user credentials.

At the time of this report the site is offline, but the infrastructure—Cloudflare hosting, a valid Google‑issued certificate, and the same nameserver pair—remains reusable for future campaigns. Defenders should add the domain to network blocklists, monitor the associated IP address and nameservers for re‑use, and consider proactive DNS sink‑holing. Continuous re‑scanning on VirusTotal or similar platforms is advised to capture any changes in detection status.