# propayacc.pages.dev — MALICIOUS

> ProPayAcc.Pages.Dev flagged for potential phishing. Exercise caution and avoid sharing personal info while investigation continues.

## Summary
PhishDestroy identifies the domain propayacc.pages.dev as under investigation for generic phishing threats. Although its risk level remains under review, the domain's association with social engineering tactics warrants caution among users.

The domain resolves to IP address 172.66.47.172 and is registered through Cloudflare, Inc., which often hosts legitimate sites but is also leveraged by malicious actors for rapid deployment. Google Safe Browsing currently flags this domain for social engineering, though VirusTotal reports zero detections across 95 security vendors, indicating no widespread antivirus labeling yet. This discrepancy suggests the domain is newly active or employing tactics that evade current signature-based detection systems.

Due to ongoing concerns and the social engineering flag, users are advised to avoid interacting with propayacc.pages.dev and refrain from submitting sensitive information. PhishDestroy is monitoring the domain’s activity closely, and security teams should consider blocking or sandboxing traffic to this domain until further clarity is attained.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP ?)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-06 11:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.172
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: alfred.ns.cloudflare.com virginia.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 10 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "CyRadar", "ESET", "Fortinet", "G-Data", "Google Safebrowsing", "Lionic", "Sophos", "VIPRE"]
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc28b-b74e-706b-b7f2-3bb19fe00a0d.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/propayacc.pages.dev
- Wayback Machine: https://web.archive.org/web/https://propayacc.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/propayacc.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/propayacc.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/propayacc.pages.dev/
Last updated: 2026-03-19