allskins[.]pages[.]dev

PhishDestroy identifies allskins.pages.dev, a Cloudflare-hosted page on 172.66.47.163, as a suspected generic phishing domain under active investigation. This URL shows no affiliation with recognized brands, nor does it employ a documented drainer kit at the time of analysis. The page leverages Google Trust Services SSL, which may lend false legitimacy to visitors. The absence of direct brand impersonation or drainer integration places this threat in a lower-complexity category, yet the investigation status signals potential for evolving attack vectors.

This domain presents the following technical indicators: it resolves to IP 172.66.47.163, uses a Google Trust Services SSL certificate, and was registered through Cloudflare, Inc. VirusTotal reports 0 detections out of 95 scanners, and the domain has not been listed on Google Safe Browsing or major blocklists. Creation date and registrar details remain unexposed due to Cloudflare’s privacy protections, indicating a high degree of anonymization typical in modern phishing infrastructures.

Currently, allskins.pages.dev remains active, with an ongoing investigation into its operational intent and user targeting patterns. No confirmed blocklist entries have been recorded, and the domain’s current threat level is classified as under investigation. Users are advised to avoid interacting with this URL until further forensic validation is complete. PhishDestroy continues to monitor for new signatures or changes in payload behavior, but the absence of detections and SSL certification by a trusted provider remains a caveat for cautious engagement.