v3vault[.]pages[.]dev

PhishDestroy identifies the domain v3vault.pages.dev as a currently active phishing site impersonating a secure vault login portal. The threat type is generic phishing, specifically targeting users with deceptive login pages designed to harvest credentials. This domain has been confirmed as malicious and remains operational as of the latest intelligence update. v3vault.pages.dev was flagged by 4 of 95 VirusTotal security vendors and is blocked by ScamSniffer. The domain is registered through Cloudflare, Inc., resolves to IP address 172.66.47.40, and carries a Google Trust Services SSL certificate. It appears on 1 security blocklist and is flagged by Google Safe Browsing for social engineering activity. The SSL certificate issuer and registrar indicate an attempt to appear legitimate, a common tactic in phishing campaigns. Users are strongly advised to avoid accessing v3vault.pages.dev and treat any associated emails or links with extreme caution. The combination of multiple security vendor flags, blocklist presence, and deceptive infrastructure suggests a high risk of credential theft. Organizations should update their threat intelligence feeds to include this domain and notify users of the active phishing campaign. Immediate actions include domain blocking at the network level and user awareness training to prevent successful exploitation.