runc-12b[.]pages[.]dev

The domain runc-12b.pages.dev is identified as a high-risk generic phishing site. It does not appear to be targeting a specific brand or using a known drainer kit, but it is actively engaged in deceptive activities to steal user credentials or financial information.

Technical indicators for runc-12b.pages.dev include a VirusTotal score of 1/95, indicating that one security vendor has flagged this domain as malicious. The domain is registered through Cloudflare, Inc. and resolves to the IP address 172.66.44.164, which is located in California, USA. The domain was created on April 30, 2026, and it currently appears on 4 security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL. The Google Safe Browsing (GSB) status is not explicitly mentioned, but the presence on multiple blocklists suggests it is considered unsafe.

The domain remains active as of the latest analysis. Given the high risk level and the fact that it is still operational, immediate response actions are recommended. Users should avoid visiting this domain and should not enter any personal or financial information on the site. Organizations should consider adding this domain to their blocklists and monitoring for any related activity. The remaining risk is significant, as the domain has already been flagged by security vendors and is still accessible, potentially leading to further compromises.