echo-dashboard-bbb[.]pages[.]dev

This domain echo-dashboard-bbb.pages.dev is assessed as high risk credential theft infrastructure leveraging brand impersonation of Cloudflare Access sign-in flows. The observed page title and authentication framing indicate an attempt to harvest user login credentials under a trusted identity theme.

Technical telemetry shows VirusTotal detection ratio of 0/95, indicating no vendor flags at the time of analysis despite active malicious behavior. The domain was created on June 18, 2026 and is registered through Cloudflare, Inc. It resolves to IPv6 address 2606:4700:300a::6813:c31d and is hosted within US infrastructure under AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services under WE1. Security intelligence lists the domain on 3 blocklists and it is actively blocked by PhishDestroy, MetaMask, and SEAL. The site remains active at the time of observation.

Given its credential theft objective, users should avoid entering any authentication data on the site and treat any login prompts as compromised. Organizations should enforce domain-level blocking, add indicators to threat intelligence feeds, and monitor authentication logs for unusual sign-in attempts. Any credentials entered should be considered exposed and rotate immediately, with additional checks for account takeover activity and session revocation.