sexo-en-minecraft[.]pages[.]dev

This domain is flagged as a generic phishing threat targeting users with a fraudulent Minecraft guide under the title 'Unlock Minecraft Sexo Secrets: A Shocking Guide | Sexo en Minecraft.' The infrastructure is designed to deceive users into engaging with content that may lead to credential harvesting or malware distribution, though the specific payload remains unconfirmed at this stage of investigation (seed d1abb2). Analysis indicates the domain was registered on April 01, 2026, through Cloudflare, Inc., and resolves to the IP address 172.66.44.67, located in Canada. The SSL certificate is issued by Google Trust Services (WE1), a common feature in phishing campaigns leveraging legitimate CDN infrastructure. VirusTotal reports 0 detections out of 95 engines, suggesting the threat is either new or employs evasion techniques. The domain appears on one security blocklist and is currently blocked by PhishDestroy, though it remains active and accessible. The page title explicitly references Minecraft, indicating an attempt to exploit the game's popularity for malicious purposes. Mitigation steps for this threat type include blocking the domain at the network level, particularly in environments where gaming-related content is accessed. Administrators should monitor for connections to 172.66.44.67 and inspect SSL certificates issued by Google Trust Services for similar patterns. End users should be educated to recognize unsolicited gaming guides, especially those with sensationalized titles or domains unrelated to official platforms. If credentials or personal data were entered on this site, immediate password resets and account monitoring are recommended. Given the domain's recent creation and low detection rate, further analysis of its behavior and payload is warranted.