termousanty[.]pages[.]dev

PhishDestroy identifies termousanty.pages.dev as hosting an active fake antivirus alert campaign designed to trick users into downloading rogue security software. The threat level is elevated due to the combination of social engineering payload and plausible Cloudflare-based infrastructure. This domain is not merely suspicious; it is formally categorized as a generic phishing site distributing fraudulent antivirus pop-ups. This domain was flagged by PhishDestroy with an elevated risk rating. Security vendor VirusTotal reports a detection ratio of 1 out of 95 engines as of the most recent scan. The domain is registered through Cloudflare, Inc. and resolves to IP address 188.114.97.3. It operates under an SSL certificate issued by Google Trust Services, which increases its appearance of legitimacy. Despite this, no blocklist inclusion data is publicly available at this time, and the domain is currently active. Users are advised to avoid clicking any pop-ups or banners originating from termousanty.pages.dev. If accidental exposure occurs, do not download any software prompted by the site. Clear browser cache and cookies associated with the domain, and consider running a full antivirus scan using a reputable security suite. Report the domain to your browser vendor and network administrator if you suspect system compromise. Always verify the authenticity of antivirus alerts by accessing security software directly through official channels—not via browser pop-ups.