# math-de6.pages.dev — SUSPICIOUS

> math-de6.pages.dev is a credential harvesting phishing site with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies an active credential harvesting phishing campaign hosted at math-de6.pages.dev, posing as a legitimate login portal. This domain, registered through Cloudflare, Inc., leverages Cloudflare Pages to distribute fraudulent content while obscuring its true origin. The site resolves to IP address 172.66.44.118 and employs a valid Google Trust Services SSL certificate to appear legitimate, increasing the likelihood of successful deception. Users who encounter this domain should avoid entering any credentials, as the page is designed to steal login information under false pretenses.  This domain remains largely undetected at present, with 0/95 detections on VirusTotal, indicating it has not yet been widely flagged by security vendors. Registered via Cloudflare, Inc., the domain’s infrastructure suggests an attempt to evade traditional blocklists by leveraging reputable hosting and SSL services. While the exact creation date is not specified in available intelligence, the domain is actively serving malicious content, as confirmed by ongoing threat monitoring. Its low detection rate underscores the importance of proactive threat hunting and real-time verification of suspicious domains.  If you have visited math-de6.pages.dev and entered any account credentials, immediately change the passwords for those accounts and enable multi-factor authentication where available. Review account activity for signs of unauthorized access and consider revoking any sessions linked to this domain. Report the incident to the relevant service provider and monitor communications for potential follow-up phishing attempts. Avoid interacting with this domain further, as it continues to pose a credible threat to unsuspecting users.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.118

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/math-de6.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/math-de6.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/math-de6.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/math-de6.pages.dev/
Last updated: 2026-04-05