# gmthelp.pages.dev — MALICIOUS

> gmthelp.pages.dev is a tech-support phishing page hosted on Cloudflare. 12 of 95 VirusTotal engines flag it as malicious. Check the full report.

## Summary
gmthelp.pages.dev is a live tech-support scam site that masquerades as a Google service to trick visitors into calling a fake help-desk and surrendering payment information or remote-access credentials.

PhishDestroy identifies this domain as an active phishing page because it resolves to 172.66.47.49 and is flagged by 12 out of 95 VirusTotal security vendors. The page was registered through Cloudflare, Inc. and already carries a Google Trust Services SSL certificate, giving it an air of legitimacy while it lures victims.

If you visited gmthelp.pages.dev, stop any downloads or calls immediately. Close the browser tab, run a full antivirus scan, and change any passwords you may have entered. Report the domain to your browser’s safe-browsing program so others are warned before they click.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.49

## Detection Status
- VirusTotal: 12 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/cd5f5a51-fd4d-49f0-901c-93eee8d92479
- PhishDestroy: https://phishdestroy.io/domain/gmthelp.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/gmthelp.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/gmthelp.pages.dev/
Last updated: 2026-04-14