gleam-1zk[.]pages[.]dev

PhishDestroy identifies gleam-1zk.pages.dev as an active credential-harvesting campaign impersonating a sweepstakes giveaway. The site is designed to trick visitors into submitting email or social-media login details under the false promise of a prize. Once entered, credentials are sent to attacker-controlled servers, enabling account takeovers and follow-on phishing against contacts.

This domain was flagged during routine threat-intelligence analysis on seed 6632f9. It resolves to IP 188.114.97.3 and is served through Cloudflare Pages, hiding the true hosting origin. VirusTotal shows zero detections out of 95 engines as of the latest scan. The domain uses a Google Trust Services SSL certificate to appear legitimate and remains active at the time of writing.

If you visited gleam-1zk.pages.dev, assume your credentials may have been compromised. Immediately change passwords for that email and any linked social-media or banking accounts. Enable multi-factor authentication where possible. Scan devices with an up-to-date antivirus tool to detect any malware delivered during the visit. Report the domain to your email provider and social-media platform to help block further abuse.