jmp6u[.]pages[.]dev

PhishDestroy identifies jmp6u.pages.dev as a generic phishing domain hosting a fraudulent Guildhall page. This domain employs deceptive tactics to impersonate legitimate services, aiming to harvest user credentials or sensitive information. No specific drainer kit was detected during initial analysis, but the page structure aligns with common phishing templates targeting unsuspecting victims. This domain was flagged with a generic phishing risk (1dc597) and resolves to IP 172.66.47.172 through Cloudflare, Inc. registrant. VirusTotal analysis currently shows 2/95 detections, indicating it remains under the radar. The domain uses a Google Trust Services SSL certificate and aligns with Cloudflare Pages infrastructure, which has been exploited by threat actors for hosting malicious content. jmp6u.pages.dev remains active as of the latest check, with no confirmed takedown actions despite its malicious intent. Users are advised to avoid interaction and report this domain to security teams. The current risk level is under_investigation, but the lack of detections suggests a need for heightened vigilance to prevent potential credential theft.