tst-1p6[.]pages[.]dev

The domain tst-1p6.pages.dev has been classified as a generic phishing threat. It impersonates Bubble Swap, a decentralized exchange platform, to steal user credentials or private keys through fraudulent login pages. The site is currently active and poses a high risk to anyone who may encounter it.

Technical indicators confirm the severity of this threat. VirusTotal reports that 3 out of 95 security vendors flag this domain as malicious. The domain was registered through Cloudflare, Inc. and resolves to the IP address 188.114.97.3. It was created on March 27, 2026, and its SSL certificate is issued by Google Trust Services / WE1. The domain appears on 4 security blocklists, indicating widespread recognition as a threat by cybersecurity communities.

As of the latest analysis, tst-1p6.pages.dev remains active. Users who have visited the site should change any passwords or keys entered there immediately and monitor accounts for suspicious activity. It is recommended to block this domain at the network level and avoid any interaction. While the domain is flagged by multiple sources, its continued operation means the risk of credential theft persists. PhishDestroy advises treating any unsolicited links to this site as malicious and reporting them to relevant authorities.