# axol-9sk.pages.dev — SUSPICIOUS

> Axol-9sk.pages.dev is a freshly launched Cloudflare page being abused for credential-stealing phishing campaigns (0/95 VirusTotal detections).

## Summary
PhishDestroy identifies axol-9sk.pages.dev as an ACTIVE credential-harvesting phishing site currently under investigation by security teams. The domain is weaponized for low-friction social-engineering theft and remains undetected by 0 out of 95 VirusTotal engines as of seed f550d6.  

Axol-9sk.pages.dev was registered through Cloudflare, Inc., resolving to IP 188.114.96.3 and secured with a Google Trust Services SSL certificate. VirusTotal scanning returns 0 positive detections (VT 0/95), the registrar details to Cloudflare, Inc., and IP geolocation ties the host to a Cloudflare edge node in the 188.114.96.0/24 range. No entries appear on public blocklists or threat-intel feeds at this time, classifying the risk level as under_investigation.  

Users encountering axol-9sk.pages.dev should avoid interacting with any login prompts or form submissions. Verify the exact destination by closely inspecting the browser address bar for https://axol-9sk.pages.dev and confirm the Google Trust Services SSL certificate before entering credentials. Use a password manager’s built-in domain-checker to block autofill on untrusted sites. Report the URL to your organization’s SOC or forward it to urlscan.io and PhishDestroy’s seed f550d6 for rapid takedown coordination.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6a09b9e0-1e7b-445a-b78c-f47b6c439889
- PhishDestroy: https://phishdestroy.io/domain/axol-9sk.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/axol-9sk.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/axol-9sk.pages.dev/
Last updated: 2026-03-31