# testetsttt.pages.dev — SUSPICIOUS

> testetsttt.pages.dev is a phishing site hosted on Cloudflare with 0/95 VirusTotal detections. Users should avoid interaction and report any exposure to IT.

## Summary
PhishDestroy identifies testetsttt.pages.dev as a live phishing domain currently under active investigation. This site poses a credible threat to users who may unknowingly submit sensitive information through deceptive login or payment forms. The domain leverages Cloudflare's infrastructure to evade detection while relying on Google Trust Services for SSL encryption, creating a false sense of legitimacy. Security teams should treat this as a high-priority alert due to its active status and potential for credential harvesting.

This domain was flagged by PhishDestroy with the seed identifier 47292e after analysis revealed it resolves to IP address 188.114.96.3 and remains undetected by VirusTotal (0/95 engines as of the latest scan). The site's SSL certificate is issued by Google Trust Services, and registration occurs through Cloudflare, Inc., which complicates traditional takedown efforts. While the current risk level is marked as 'under_investigation,' the absence of antivirus detections suggests this threat is either novel or employing sophisticated evasion techniques.

If you or someone in your organization has visited testetsttt.pages.dev, disconnect from the network immediately and scan all devices for unauthorized access or malware. Report the incident to your security team with exact timestamps of the visit and any data entered. Even if no credentials were submitted, flag the domain for email filtering and browser blocklists to prevent further exposure. Cloudflare's infrastructure may delay takedowns, so proactive blocking of 188.114.96.3 at the network perimeter is advised. Monitor for follow-on phishing campaigns, as threat actors often reuse compromised assets across multiple attacks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3c63d3dd-8b66-431b-a797-b39a31f97b14
- PhishDestroy: https://phishdestroy.io/domain/testetsttt.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/testetsttt.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/testetsttt.pages.dev/
Last updated: 2026-03-30