# cancel-disney-plus-tv-subscription.pages.dev — SUSPICIOUS

> This domain, cancel-disney-plus-tv-subscription.pages.dev, poses as a Disney+ cancellation portal. Flagged by 0 of 95 VirusTotal vendors, users risk exposing.

## Summary
PhishDestroy identifies the active phishing domain cancel-disney-plus-tv-subscription.pages.dev impersonating the official Disney+ subscription cancellation portal to harvest user credentials and payment details. This threat is currently classified under generic_phishing and remains under investigation by security teams. The domain exploits trust in legitimate services by leveraging Cloudflare’s infrastructure and Google Trust Services SSL certificates to appear authentic.  This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, indicating a low detection rate despite its malicious intent. It resolves to IP address 172.66.47.79 and is registered through Cloudflare, Inc., which provides anonymity and operational resilience to threat actors. The domain’s use of Google Trust Services for SSL certificates further enhances its credibility, tricking users into believing it is a legitimate Disney+ support page. Trust scores from security vendors remain low, and no confirmed blocklist entries exist at this time, increasing the risk of successful exploitation.  The current status of cancel-disney-plus-tv-subscription.pages.dev is active, with no confirmed takedowns or deactivations. Users who encounter this domain should avoid interacting with it entirely, as it is designed to mimic official Disney+ cancellation processes to steal sensitive information. To mitigate risk, verify any subscription-related actions directly through the official Disney+ website or authenticated mobile applications. If credentials or payment details were entered, immediately change passwords, contact financial institutions, and report the incident to Disney+ support and relevant cybersecurity authorities. Security teams are urged to monitor this domain for escalation in malicious activity and update detection signatures accordingly.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.79

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/1f46e212-bb32-4db2-9543-afc3db9e47cf
- PhishDestroy: https://phishdestroy.io/domain/cancel-disney-plus-tv-subscription.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/cancel-disney-plus-tv-subscription.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cancel-disney-plus-tv-subscription.pages.dev/
Last updated: 2026-03-21