y0tcsc285alpv8rv3mm4fiph[.]pages[.]dev

This domain, y0tcsc285alpv8rv3mm4fiph.pages.dev, poses a high risk of brand impersonation, specifically targeting Gmail. If accessed, it may trick users into providing sensitive information such as login credentials, leading to unauthorized account access and potential data theft.

Analysis indicates that y0tcsc285alpv8rv3mm4fiph.pages.dev is flagged by 3 out of 95 security vendors on VirusTotal, suggesting a moderate level of suspicion within the security community. The domain was created on November 20, 2025, and is registered through Cloudflare, Inc. Additionally, the SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy to the site. The IP address 2a00:1450:4001:80e::2004, located in Germany (AS15169 Google LLC), further complicates the detection of this malicious activity.

If a user has visited y0tcsc285alpv8rv3mm4fiph.pages.dev, it is recommended to immediately change the passwords for all Gmail accounts and any other accounts where the same password might have been used. Conduct a full security scan of the device to ensure no malware was installed. Users should also be vigilant for any unusual activity in their accounts and report any suspicious incidents to their respective service providers. Enabling two-factor authentication (2FA) on all critical accounts provides an additional layer of security.