acc-review-quality-5dap-bqvq-8wrl[.]pages[.]dev

This domain, acc-review-quality-5dap-bqvq-8wrl.pages.dev, is confirmed as a credential theft phishing site with active deployment as of the latest threat intelligence. The infrastructure is associated with malicious actors attempting to harvest user login credentials through deceptive web pages. PhishDestroy identifies this domain as part of a broader campaign targeting unsuspecting victims via fake review or quality assurance portals.

This domain was flagged by PhishingDB and remains undetected by 15 of 95 VirusTotal vendors, indicating a low detection rate despite its malicious nature. It is registered through Cloudflare, Inc., resolving to IP address 188.114.97.3, and holds an SSL certificate issued by Google Trust Services. The domain is hosted on Cloudflare Pages, a legitimate service being abused for phishing deployment. As of the latest telemetry, it has appeared on 1 security blocklist and continues to operate without widespread vendor recognition, presenting a significant risk for credential compromise.

Current status indicates an active threat with potential for rapid expansion due to Cloudflare’s hosting infrastructure and the domain’s current low detection profile. Users accessing this domain risk exposure of sensitive credentials to malicious actors. PhishDestroy recommends immediate blocking of the domain and associated IP at the network perimeter. Additionally, organizations should update firewall rules, DNS filters, and endpoint protection systems to include this indicator. Users should verify the legitimacy of any unexpected review or survey requests, especially those delivered via unsolicited emails or messages. Report any interactions with this domain to your security team and relevant threat intelligence platforms for further analysis and dissemination.