famous-sable-8d2114[.]pages[.]dev

PhishDestroy identifies famous-sable-8d2114.pages.dev as a credential-harvesting phishing page actively targeting unsuspecting users. This domain resolves to IP 188.114.97.3 and operates under a Let’s Encrypt SSL certificate to appear trustworthy, while its Cloudflare registration obscures true ownership. VirusTotal currently shows 0/95 detections, indicating this threat remains undetected by many security engines, and the domain has not yet appeared on major blocklists.

Technical analysis reveals this Pages.dev subdomain is configured to mimic legitimate login interfaces, tricking visitors into entering sensitive credentials such as usernames and passwords. Despite hosting on a reputable CDN (Cloudflare Pages), the domain’s recent creation and lack of historical blocklist presence make it a high-risk vector for phishing campaigns. The absence of antivirus detection suggests attackers are leveraging evasion techniques or newly registered infrastructure to avoid early detection.

Users who have visited or entered information on famous-sable-8d2114.pages.dev should immediately change passwords used on that site, enable multi-factor authentication on all related accounts, and scan devices with updated antivirus software. Avoid clicking links in unsolicited emails or messages referencing this domain. Report the site to your email provider or browser safety tools if possible. Monitor financial and personal accounts for unusual activity, and consider using identity protection services if sensitive data was submitted.