gggggggggggggggggggggggggggggg-wi2[.]pages[.]dev

The domain gggggggggggggggggggggggggggggg-wi2.pages.dev is currently classified as an active generic phishing threat as of July 29, 2026. This assessment is based on multiple concrete indicators: the domain is actively blocked by PhishDestroy, MetaMask, and SEAL, which are well-known security solutions that maintain real-time blocklists for phishing and fraudulent activity. Furthermore, it appears on three distinct security blocklists, indicating that multiple threat intelligence sources have independently identified and reported the domain for abuse.

The domain resolves to IP address 172.66.44.91 and is registered through Cloudflare, Inc., using Cloudflare’s DNS infrastructure (nameservers sneh.ns.cloudflare.com and yisroel.ns.cloudflare.com). VirusTotal reports that 91 vendors have scanned the domain, with none currently flagging it as malicious; however, the lack of detections is explicitly not evidence of safety, and defenders should not interpret this as a clean bill of health. The presence of blocks by major anti-phishing platforms and its inclusion on multiple security blocklists outweigh the absence of live VirusTotal detections and point toward ongoing or recent abuse.

At this time, the specific content hosted on the domain has not been directly analyzed, and no brand impersonation or phishing kit details have been provided. Therefore, while the exact nature of the phishing operation is unconfirmed, the aggregate threat intelligence warrants caution. Security teams are advised to maintain active blocks on this domain and monitor for any related activity in their networks. Further direct payload or HTTP analysis would be required to establish the precise tactics or lures used by this domain.