sucess-live-app[.]pages[.]dev

PhishDestroy identifies sucess-live-app.pages.dev as an active phishing domain posing as a login portal for an unspecified service. This generic-sounding domain leverages Cloudflare Pages to appear legitimate while impersonating a login interface to harvest user credentials. The threat is heightened by the domain’s use of a Google Trust Services SSL certificate, which may lull visitors into a false sense of security.

This domain was flagged under seed b84cc9 and remains under investigation. Intelligence shows it was registered through Cloudflare, Inc., with 13 out of 95 VirusTotal scanners currently detecting the threat. The domain resolves to IP address 172.66.47.170 and currently appears on no major blocklists, allowing it to evade early detection systems.

If you visited this domain or entered any credentials, immediately change the passwords on all accounts using that login information and enable multi-factor authentication where possible. Scan your device for malware using reputable antivirus software and monitor accounts for unusual activity. Report the domain to your organization’s security team or to PhishDestroy’s reporting portal to aid in takedown efforts.