webresolve-connect[.]pages[.]dev

PhishDestroy identifies webresolve-connect.pages.dev as an active credential harvesting scam designed to steal user login credentials. This domain mimics legitimate services to trick victims into entering sensitive information, which is then harvested by threat actors for further exploitation. The site likely leverages social engineering tactics, such as impersonating a trusted entity, to deceive users into disclosing usernames, passwords, or financial details. Given its active status and lack of detection, this domain poses a significant risk to unsuspecting visitors, particularly those expecting secure or official communications. This domain was flagged by PhishDestroy with the following technical indicators: It resolves to IP 188.114.97.3, is registered through Cloudflare, Inc., and holds a Google Trust Services SSL certificate to appear legitimate. Notably, VirusTotal currently reports 0/95 detections, indicating it remains undetected by most antivirus engines at this time. While the exact creation date is unspecified, its active credential harvesting operations suggest recent deployment. Users are strongly advised to avoid interacting with this domain and report any encountered phishing attempts to relevant authorities. If you have already visited webresolve-connect.pages.dev, immediately cease any further interaction and scan your device for malware. Change passwords for any accounts that may have been exposed, and enable multi-factor authentication where possible. Report the domain to your organization’s security team or to platforms like PhishDestroy to aid in broader threat mitigation. Stay vigilant for follow-up phishing attempts, as threat actors often reuse compromised credentials for secondary attacks.