# halborntest.pages.dev — SUSPICIOUS > PhishDestroy identifies halborntest.pages.dev hosting a fake login page. 0/95 VirusTotal detections, IP 172.66.47.80. Check the full report. ## Summary PhishDestroy identifies halborntest.pages.dev as an active phishing page masquerading as a legitimate login portal. This domain mimics a credential-stealing trap designed to harvest usernames and passwords from unsuspecting visitors. Victims who enter their credentials risk immediate account takeover and potential follow-on attacks such as identity theft or corporate breach. This domain was flagged by PhishDestroy on 36d138. It was registered through Cloudflare, Inc., has 0 detections out of 95 VirusTotal scans, resolves to IP 172.66.47.80, and holds a Google Trust Services SSL certificate. These indicators suggest a recently deployed, low-profile campaign that has yet to be widely blocked. If you visited halborntest.pages.dev, assume your credentials may have been exposed. Immediately change passwords for any accounts you entered, enable multi-factor authentication where available, and scan your devices for malware. Report the incident to your security team and consider freezing affected accounts until you confirm their safety. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 172.66.47.80 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/domains/halborntest.pages.dev - PhishDestroy: https://phishdestroy.io/domain/halborntest.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/halborntest.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/halborntest.pages.dev/ Last updated: 2026-04-04