# midnight-7ti.pages.dev — SUSPICIOUS

> PhishDestroy identifies midnight-7ti.pages.dev as an active credential harvesting scam, flagged by 0 of 95 VirusTotal vendors. Check the full report.

## Summary
PhishDestroy identifies midnight-7ti.pages.dev as an active credential harvesting scam, currently under investigation. This domain mimics legitimate login portals to deceive users into submitting sensitive credentials, posing a direct threat to personal and corporate security.    midnight-7ti.pages.dev was flagged by 0 of 95 VirusTotal vendors, indicating no current detections despite active malicious activity. The domain is registered through Cloudflare, Inc., resolves to IP 188.114.96.3, and utilizes a Let's Encrypt SSL certificate for legitimacy deception. While creation details remain undisclosed, the absence of blocklist entries suggests this campaign is newly operational, targeting unsuspecting users with precision.    The current status of this domain remains active, with no detections from security vendors. Users are advised to avoid interacting with this domain and report it to their security teams. Organizations should implement network-level blocking for IP 188.114.96.3 and monitor for related infrastructure. PhishDestroy continues to track this campaign under seed f9ecb5 for further intelligence updates.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a379e45a-3f86-4307-84dc-66ee9233f0e8
- PhishDestroy: https://phishdestroy.io/domain/midnight-7ti.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/midnight-7ti.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/midnight-7ti.pages.dev/
Last updated: 2026-03-22