mindofpepes[.]pages[.]dev

mindofpepes.pages.dev is currently flagged for active PayPal credential phishing, a form of brand impersonation designed to harvest user login credentials and sensitive financial data.

This domain, hosted on Cloudflare Pages under the subdomain pages.dev, has not yet been widely detected as malicious, with 3 out of 95 VirusTotal security vendors flagging it at the time of analysis. The domain resolves to IP 188.114.97.3, which is associated with Cloudflare’s infrastructure, and utilizes a Google Trust Services SSL certificate for HTTPS encryption. While the domain is newly registered and currently unblocked by major threat intelligence platforms, its use of Cloudflare’s infrastructure and trusted SSL certificate suggests an attempt to appear legitimate. PhishDestroy identifies this as a high-risk impersonation threat, particularly due to its PayPal branding exploitation.

As of this report, mindofpepes.pages.dev remains active and unblocked by mainstream threat intelligence feeds. Given the lack of widespread detection despite its malicious intent, users should exercise extreme caution when encountering this domain or any associated links. Security teams and end-users are advised to block this domain at the network level and avoid interacting with it. If encountered, report the domain to relevant threat intelligence platforms and financial institutions to aid in broader detection. Immediate investigation into the hosting infrastructure and associated campaigns is recommended to prevent further exploitation.