tmanualredf[.]pages[.]dev

PhishDestroy identifies tmanualredf.pages.dev as an active credential theft domain impersonating Reddit login pages. This fraudulent site is designed to trick users into entering their Reddit credentials, which are then harvested by cybercriminals for account takeover or further exploitation. The domain currently shows 0 detections on VirusTotal across 95 scan engines, indicating it has evaded immediate detection by most security tools. It resolves to IP 172.66.45.12 and uses a Let's Encrypt SSL certificate for added legitimacy. This domain was flagged by PhishDestroy’s automated pipeline on seed 8f62e8 and is actively hosted on Cloudflare’s Pages service. While the exact registration date and registrar details are not publicly disclosed due to Cloudflare’s privacy protection, technical analysis confirms the site is recently operational. At the time of discovery, no major antivirus or security platform had flagged the domain, underscoring the evolving nature of this threat. If you visited tmanualredf.pages.dev or entered any credentials: immediately change your Reddit password and enable two-factor authentication. Scan your device for malware using reputable antivirus software. Report the domain to Reddit’s phishing portal at reddit.com/report and block the domain in your browser. Avoid clicking suspicious links and always verify URLs before entering login details.