secretwebsitev2[.]pages[.]dev

PhishDestroy identifies active credential harvesting targeting unsuspecting users via secretwebsitev2.pages.dev. The domain is currently active and poses a verified risk to individuals attempting to access purported services through the site. The threat involves a fraudulent login interface designed to steal user credentials under the guise of a legitimate service.

This domain was flagged by 0 of 95 VirusTotal vendors at the time of analysis, indicating a low initial detection rate despite clear malicious intent. It was registered through Cloudflare, Inc. and resolves to IP address 172.66.44.151. The SSL certificate is issued by Google Trust Services, which may lend false legitimacy to the site. Additional investigation is required to determine the exact creation date, blocklist presence, and reputation scores due to the ongoing status of the threat.

As the threat remains under investigation, users are advised to avoid interacting with secretwebsitev2.pages.dev entirely. Organizations should implement network-level blocking for the domain and associated IP to prevent accidental exposure. Continuous monitoring is recommended, as detection rates on VirusTotal may increase as further analysis is conducted. Report any observed activity to relevant security teams for swift remediation.