minecraft-download-login[.]pages[.]dev

PhishDestroy identifies minecraft-download-login.pages.dev (seed: 6f5002) as an ACTIVE credential phishing domain specifically targeting Minecraft account credentials. The risk level remains under investigation, but the threat type is confirmed as credential harvesting intended to steal login details under false pretenses.

This domain resolves to IP 188.114.97.3 and is registered through Cloudflare, Inc., leveraging Google Trust Services for an SSL certificate. VirusTotal currently shows 0 out of 95 detection engines flagging this domain, meaning it has not yet been widely recognized as malicious. However, the use of Cloudflare’s infrastructure and a Google-issued SSL certificate suggests an attempt to appear legitimate and evade early-stage detection mechanisms. The .pages.dev TLD is a valid Cloudflare Pages domain used for static site hosting, which can be exploited for phishing by creating deceptive subdomains that mimic official services.

Users must exercise extreme caution when encountering this domain. To mitigate credential theft, avoid entering any login details on unsolicited or unfamiliar sites claiming to offer Minecraft downloads or account access. Enable two-factor authentication (2FA) on your Minecraft account and verify any download links through the official Minecraft website (minecraft.net). If you suspect interaction with this phishing domain, change your Minecraft password immediately and scan your system for malware. Report the domain to your antivirus provider and consider blocking 188.114.97.3 at the network level. Always confirm the authenticity of login pages by checking the URL and SSL certificate issuer before entering credentials.