ppdb-mtsnuruttauhidwonorejo[.]pages[.]dev

The domain ppdb-mtsnuruttauhidwonorejo.pages.dev is currently under investigation for generic phishing activities and remains active. It masquerades as an online school registration application for MTs Nurut Tauhid Wonorejo, but the title reveals it is actually promoting GOWIN123, a likely fraudulent brand. This domain was registered on October 2, 2025, and is hosted by Cloudflare, Inc., resolving to IP address 172.66.44.173.

Despite appearing on at least one security blocklist, VirusTotal shows 0 detections out of 95 vendors, indicating it has not yet been widely flagged by antivirus engines. The SSL certificate is issued by Google Trust Services / WE1, which is legitimate, but that does not guarantee the site’s integrity. The discrepancy between the school-related URL path and the GOWIN123 page title strongly suggests a phishing scheme designed to trick users into entering sensitive information.

Given its active status and low detection rate, users are advised to avoid interacting with this domain entirely. Do not enter any personal, financial, or login credentials. If you have already visited the site, monitor your accounts for suspicious activity and consider changing passwords. Report the domain to your security team or relevant authorities to help prevent further victims.