faq-hxt-login-en[.]pages[.]dev

PhishDestroy has identified that faq-hxt-login-en.pages.dev is an active credential-phishing domain designed to harvest user login credentials. This site impersonates a legitimate authentication portal, likely targeting victims under the guise of accessing an official service. The threat level remains under investigation as analysts continue to assess its operational scope and intended targets. This domain was flagged for credential phishing after resolving to IP address 172.66.47.160. VirusTotal currently shows no detections (2/95 engines) despite active abuse. Registered through Cloudflare, Inc., the domain uses a Google Trust Services SSL certificate to appear legitimate. Security teams have not yet added this domain to major blocklists, leaving users potentially exposed. If you accessed faq-hxt-login-en.pages.dev, immediately cease any interaction and avoid entering credentials. Disconnect from the network if possible, then check your accounts for unauthorized access. Use PhishDestroy’s domain verification tool to confirm the site’s safety before any future use. Report the domain to your security team or block it at the network level to prevent further exposure.