app-netx[.]pages[.]dev

PhishDestroy identifies app-netx.pages.dev as an active fake login page phishing site designed to trick users into submitting login credentials. The site mimics legitimate login portals to harvest usernames and passwords, often redirecting victims to credential-stealing forms. This particular domain is hosted on Cloudflare Pages and leverages Google Trust Services for SSL certificates, giving it an air of legitimacy that masks its malicious intent. Users who enter their credentials risk immediate account compromise and potential follow-on attacks such as credential stuffing or identity theft. This domain was flagged by PhishDestroy’s automated pipeline using seed 0ee6e1 after resolving to IP 188.114.97.3. VirusTotal currently shows 0 detections out of 95 engines, indicating it has not yet been widely recognized as malicious. The domain is registered through Cloudflare, Inc., which provides anonymity and CDN services that can obscure the true origin of the site. Despite the use of Google Trust Services for SSL, the lack of detections on VirusTotal suggests either a very new campaign or one that is carefully avoiding signature-based detection. If you have visited app-netx.pages.dev, assume your login credentials may have been compromised. Immediately change the passwords for any accounts you entered on this site, and enable multi-factor authentication where available. Run a full antivirus scan on your device to check for malware. Report the domain to your email provider or security team if you used work credentials. Monitor your accounts closely for unusual activity and consider enabling login alerts. Avoid re-entering credentials on this site or any linked pages.