live-en-shop[.]pages[.]dev

The domain live-en-shop.pages.dev has been identified as involved in targeted credential phishing campaigns. While the exact brand impersonation is currently undetermined, the domain actively attempts to deceive users into divulging sensitive login credentials through fake login page setups. The status of this threat remains under investigation as analysts continue to monitor its activity and scope.

According to detailed threat intelligence, live-en-shop.pages.dev is registered through Cloudflare, Inc. The domain uses an SSL certificate issued by Google Trust Services, enhancing its appearance of legitimacy. It resolves to the IP address 188.114.96.3. VirusTotal scans have not yet detected any malicious content, with 4 out of 95 vendors flagging it. There are currently no entries for this domain in known blocklists or established trust scoring databases. These technical indicators suggest the campaign is either new or uses methods that evade conventional automated detection.

Given the active status of live-en-shop.pages.dev, security professionals advise increased vigilance when encountering this domain, especially in unsolicited emails or messages requesting credentials. Users should avoid interacting with suspicious links, verify URLs carefully, and report any phishing attempts immediately. Organizations should consider blocking this domain at the network level and employ advanced threat detection tools to capture evolving tactics associated with this credential phishing threat.