getmysite[.]pages[.]dev

Analysis of the domain getmysite.pages.dev indicates a likely phishing operation targeting small-business owners under the guise of a low-cost website offer. The page displays the title '$595 Small-Business Websites | Aussie-Owned, No Hidden Fees,' which aligns with common social-engineering tactics used to attract budget-conscious entrepreneurs. The domain was registered on March 28, 2026, through Cloudflare, Inc., and remains active as of July 12, 2026. It resolves to the IP address 188.114.97.3 and is currently flagged by one security blocklist, PhishDestroy, though it has not yet been detected by any of the 95 engines on VirusTotal. Infrastructure review reveals the use of Astro for static site generation, HTTP/3 for transport, and HSTS for forced encryption, all delivered behind Cloudflare’s network. The SSL certificate is issued by Google Trust Services, providing a superficial layer of legitimacy. While the technical stack is modern and legitimate services are employed, the domain’s trust score is 0 out of 100, and no prior legitimate use has been recorded. The combination of a low-cost business pitch, recent registration, and minimal detection raises suspicion despite the clean scan results. At this stage, the exact payload or end goal remains unclear. No evidence of credential harvesting forms, malicious redirects, or embedded scripts has been confirmed in the current page content. However, the domain’s structure and hosting pattern mirror known phishing campaigns that later introduce payment fraud or credential theft. Defenders are advised to treat this domain as high-risk pending further investigation. Network-level blocking is recommended, particularly for endpoints in small-business or retail sectors. Continuous monitoring for changes in page content, domain reputation, or detection rates is strongly advised.