lock-v2-truthofficial[.]pages[.]dev

Analysis of the domain lock-v2-truthofficial.pages.dev indicates elevated risk consistent with phishing activity. The domain was registered on January 30, 2026, through Cloudflare Pages, a service frequently leveraged for rapid deployment of malicious infrastructure due to its free tier and CDN capabilities. It currently resolves to the IP address 172.66.44.157, which is part of Cloudflare's network, a common pattern observed in phishing campaigns seeking to obscure origin and evade IP-based blocking. As of July 29, 2026, the domain appears on one security blocklist and is actively blocked by PhishDestroy, a specialized anti-phishing vendor.

VirusTotal detection data shows that 10 out of 91 security vendors flag this domain as malicious, a detection rate that, while not definitive, aligns with known phishing indicators. Infrastructure analysis reveals no additional brand targeting or scam classification in available threat intelligence. The exact content of the site has not been analyzed, and no page title, phishing kit, or specific brand impersonation is confirmed in the provided data.

Defenders should treat this domain as an active phishing threat. Recommended actions include blocking the domain and IP at network perimeter controls, monitoring for internal access attempts, and submitting the domain to additional threat intelligence platforms for broader detection coverage. Given the use of Cloudflare Pages, takedown efforts may require direct engagement with Cloudflare's abuse team, as standard registrar complaints are unlikely to yield immediate results.