# mapool-org.pages.dev — SUSPICIOUS

> Domain mapool-org.pages.dev is a live phishing page hosted on Cloudflare, undetected on VirusTotal (0/95).

## Summary
PhishDestroy identifies an active credential-harvesting campaign using the domain mapool-org.pages.dev. This infrastructure is designed to impersonate a legitimate service and trick visitors into surrendering login details. The page currently resolves to IP 172.66.47.109 under Cloudflare’s Pages platform and leverages a Google Trust Services SSL certificate to appear authentic.  This domain has not yet been flagged by security vendors, showing 0 detections out of 95 engines on VirusTotal at the time of writing. The campaign remains under active investigation, indicating ongoing changes to evade detection. Registrant data is obscured via Cloudflare’s privacy proxy, and the certificate’s issuance by Google Trust Services further lends false legitimacy to the fraudulent site.  If you visited mapool-org.pages.dev or entered any information, assume your credentials have been compromised. Disconnect from the network immediately, rotate all passwords associated with the exposed account, and enable multi-factor authentication where available. Report the domain to your security team and monitor accounts for unauthorized access. Consider running a malware scan with updated antivirus software to detect any secondary payloads delivered during the session.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.109

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/8c983b02-b9d0-4143-8d04-fe9490f4bfb5
- PhishDestroy: https://phishdestroy.io/domain/mapool-org.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/mapool-org.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/mapool-org.pages.dev/
Last updated: 2026-03-30