wjsng52vstr-ybfch38mja-1d3e9f-mv918n[.]pages[.]dev

This domain wjsng52vstr-ybfch38mja-1d3e9f-mv918n.pages.dev is currently flagged as an active credential‑harvesting site. Infrastructure analysis shows the domain resolves to the IPv4 address 172.66.45.6. The hosting provider for that address is not disclosed in the available data, but the IP is associated with a known malicious hosting environment that has been cited by multiple security vendors. The domain is listed on a single external blocklist and has been actively blocked by the PhishDestroy filtering service, indicating that at least one defensive platform has taken remediation action.

VirusTotal reports that 14 out of 91 scanned security vendors have generated a malicious verdict for the domain, confirming a consensus of moderate detection confidence. No additional context such as a page title, SSL certificate details, or HTTP response code is available, limiting the depth of the surface‑web assessment. The lack of publicly disclosed registrar information or creation date prevents attribution of the registration lifecycle, and the absence of Safe Browsing or OTX entries suggests that the domain may be relatively new or not yet widely propagated through reputation feeds. Given the observable indicators, defenders should prioritize immediate containment.

Network‑level rules should be created to deny any outbound or inbound traffic to 172.66.45.6 and to block DNS resolution for the full domain string. Endpoint protection platforms that integrate VirusTotal or similar multi‑engine verdicts should be configured to flag the domain as malicious, and any email filtering solutions should incorporate the blocklist entry. Continuous monitoring of the IP address for new associations and periodic re‑query of reputation services are recommended to capture any escalation in detection counts or additional blocklist listings.