# acs-4qz.pages.dev — SUSPICIOUS

> Investigating acs-4qz.pages.dev: active Google Trust Services phishing page hosted on 188.114.96.3 with 0/95 VirusTotal detections.

## Summary
PhishDestroy identifies acs-4qz.pages.dev as an active generic phishing domain currently under investigation for credential harvesting operations.

This domain, registered through Cloudflare, Inc., leverages Google Trust Services SSL certificates to host a malicious landing page at IP 188.114.96.3. As of discovery seed 09e06c, the domain remains undetected by 0 of 95 VirusTotal vendors, posing elevated risk due to its current evasion of automated detection frameworks. The Cloudflare Pages platform obscures underlying infrastructure, while the Google-issued certificate lends false legitimacy to unsuspecting users.

Technical indicators suggest an ongoing phishing campaign with no confirmed brand impersonation at this stage, though targeting patterns remain under analysis. Current status is classified as active with risk level under investigation. Immediate safety guidance includes blocking IP 188.114.96.3 at network perimeter, flagging ssl:188.114.96.3:443 in TLS inspection policies, and advising end users to avoid visiting acs-4qz.pages.dev. Security teams should monitor for related domains registered after 2024 as this campaign may expand via dynamic Page routes.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/388c019f-ecf1-4d96-94d6-c6ab5d3db663
- PhishDestroy: https://phishdestroy.io/domain/acs-4qz.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/acs-4qz.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/acs-4qz.pages.dev/
Last updated: 2026-03-28