superaigacor4[.]pages[.]dev

The domain superaigacor4.pages.dev is a credential-phishing site that presents an elevated risk. It does not impersonate a specific brand or deploy a known drainer kit, but it was actively harvesting login credentials before being taken offline. As of the latest verification, superaigacor4.pages.dev is no longer accessible, though residual indicators remain for analysis.

Technical indicators show that superaigacor4.pages.dev was flagged by 3 of 95 VirusTotal security vendors, including ChainPatrol, alphaMountain.ai, and Fortinet. It appeared on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. The domain was registered through Cloudflare, Inc. on September 01, 2025, and resolved to the IP address 188.114.97.3, hosted on Cloudflare's US-based AS13335. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Suspected phishing site | Cloudflare'. Technologies detected included HSTS, Cloudflare, and HTTP/3, with an HTTP status of 403 at the time of takedown. Gridinsoft assigned a trust score of 0/100 to superaigacor4.pages.dev.

Individuals who may have interacted with superaigacor4.pages.dev should immediately change passwords for any accounts entered on the site and enable two-factor authentication where available. Monitor financial and login activity for signs of fraud, such as unauthorized transactions or unexpected password reset emails. Report the phishing domain to the registrar (Cloudflare, Inc.) via their abuse reporting portal and submit it to additional blocklists like PhishTank or OpenPhish to aid in broader mitigation efforts.