nxuqmp[.]pages[.]dev

The domain nxuqmp.pages.dev poses a risk by impersonating legitimate login pages to steal user credentials. This type of phishing threat attempts to deceive visitors into entering sensitive information such as usernames and passwords, which can then be exploited for unauthorized access to personal or financial accounts. Users encountering this site should be cautious as it is designed to look convincing but aims to compromise their security.

PhishDestroy's analysis found that nxuqmp.pages.dev currently has 4 out of 95 detections on VirusTotal, indicating that automated scanners have not yet flagged it, which can sometimes happen with newly created or cleverly disguised phishing pages. The domain resolves to the IP address 188.114.96.3 and uses an SSL certificate issued by Google Trust Services, adding a layer of apparent legitimacy to the site’s presentation. It is registered through Cloudflare, Inc., a common registrar and hosting provider for such pages. Given these factors, the site remains under investigation but is active and likely to be malicious.

If you have visited nxuqmp.pages.dev and entered any personal information, immediately change your passwords on the affected accounts and enable multifactor authentication where available. Monitor your accounts closely for any suspicious activity or unauthorized transactions. Avoid revisiting the domain and do not download any files or provide further information. Reporting the site to your organization’s security team or a relevant authority can help prevent others from falling victim to this scam. Always verify website URLs carefully before entering sensitive data, especially on sites that request login credentials.