rps-ato[.]pages[.]dev

PhishDestroy identifies the domain rps-ato.pages.dev as involved in credential theft, a specific form of phishing designed to steal login details from unsuspecting users. Although there is no explicit brand impersonation or crypto draining kit linked to this domain, it poses a significant risk by attempting to capture sensitive credentials through deceptive means.

Technical indicators reveal that rps-ato.pages.dev currently holds a VirusTotal detection score of 0 out of 95, indicating it has not yet been flagged by major antivirus engines. The domain resolves to IP address 172.66.45.38 and is registered via Cloudflare, Inc. Its SSL certificate is issued by Google Trust Services, lending a false sense of legitimacy. The domain is active and remains unlisted in Google Safe Browsing and other blocklists at this time. No creation date was provided in the current intelligence.

At present, rps-ato.pages.dev is under active investigation but remains accessible and unblocked by many security services, posing ongoing risk to users. It is recommended that individuals refrain from entering any login credentials or sensitive information on this domain. Organizations should monitor network traffic for access attempts to this domain and consider implementing domain or IP blocking until the investigation concludes. Continued vigilance is necessary as the domain could escalate its malicious activity or be added to blocklists in the near future.