eng-live-us[.]pages[.]dev

This domain, eng-live-us.pages.dev, was identified as a credential harvesting phishing site designed to deceive users into disclosing sensitive login credentials. Such sites typically mimic legitimate services, using social engineering tactics to trick visitors into entering usernames, passwords, or other personal information, which is then captured by threat actors for malicious purposes. Analysis indicates the domain was registered on April 04, 2026, through Cloudflare, Inc., and resolved to the IP address 172.66.44.183. At the time of assessment, the domain was flagged by 7 out of 95 security vendors on VirusTotal, with one additional security blocklist listing it as malicious. The SSL certificate was issued by Google Trust Services, a common practice among phishing sites to appear legitimate. The domain has since been taken offline, though its infrastructure remains a potential indicator of compromise. Users who visited eng-live-us.pages.dev should immediately revoke any entered credentials, particularly if they were reused across other platforms. Monitor accounts associated with the compromised credentials for unauthorized activity, and consider enabling multi-factor authentication where available. If financial or sensitive data was submitted, report the incident to relevant authorities and review transaction histories for signs of fraud. Infrastructure analysis reveals the domain was hosted on Cloudflare’s network, a frequent choice for phishing campaigns due to its accessibility and perceived legitimacy.