cloudverse-opseccomputer[.]pages[.]dev

The domain cloudverse-opseccomputer.pages.dev is currently active and identified as a fake login phishing site targeting Opsec credentials. Analysis indicates this is not a generic phishing attempt but a targeted impersonation of Opsec authentication portals, designed to harvest user credentials under false pretenses. The domain remains operational as of the latest verification, posing an ongoing risk to individuals and organizations interacting with Opsec-related services. Infrastructure analysis reveals the domain was registered on July 15, 2024, through Cloudflare, Inc. and resolves to the IP address 188.114.97.3, hosted on AS13335 (Cloudflare, Inc.) in the United States. Security vendors have flagged this domain with 13 detections out of 95 on VirusTotal, and it appears on three distinct security blocklists. The SSL certificate is issued by Google Trust Services (WE1), a common characteristic of both legitimate and malicious domains leveraging Cloudflare’s infrastructure. The page title, 'Opsec Cloudverse,' directly references the targeted brand, reinforcing the impersonation tactic. Current risk assessment classifies this domain as high severity due to its active status, targeted nature, and confirmed presence on multiple threat intelligence feeds. Users and network administrators are advised to block the domain at the DNS or firewall level, particularly in environments where Opsec-related services are utilized. Endpoint protection solutions should be updated to include this domain in their deny lists, and security teams should monitor for any attempted connections to 188.114.97.3 or related subdomains. If credentials were entered on this site, immediate password resets and multi-factor authentication enforcement are recommended for all potentially compromised accounts.