duck-website[.]pages[.]dev

The domain duck-website.pages.dev is currently under investigation for credential theft. The risk level is classified as under investigation, indicating that while there is evidence pointing to malicious intent, a comprehensive assessment is still ongoing.

Infrastructure analysis reveals that the domain was created on March 26, 2026, and is registered through Cloudflare, Inc. It resolves to the IP address 188.114.96.3, which is located in California, USA, and is associated with Cloudflare's infrastructure. The site's SSL certificate is issued by Google Trust Services / WE1, providing a veneer of security. Despite the absence of detections on VirusTotal (0/95), the domain appears on one security blocklist, specifically PhishDestroy, suggesting that it has been flagged for malicious activity. The current status of the domain is active, indicating ongoing potential threat to users.

To mitigate the risk of credential theft, users are advised to avoid interacting with the site and to not enter any sensitive information. Organizations should update their security blocklists to include duck-website.pages.dev and consider implementing additional layers of authentication for user access. Network administrators should monitor traffic to this domain and consider deploying web filtering solutions to block access. Regular security awareness training should also be conducted to educate users about the signs of phishing and credential theft attempts.