eq86zxc[.]pages[.]dev

This domain is actively impersonating Google login portals to harvest user credentials through fraudulent authentication interfaces. Analysis indicates the page title explicitly matches the legitimate brand, increasing the likelihood of successful deception. The infrastructure mimics trusted Google services, potentially tricking users into entering sensitive account information such as passwords or multi-factor authentication codes. Evidence confirms the domain was registered on April 30, 2025, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3, hosted on Cloudflare’s network (AS13335). Security vendors have flagged this domain on VirusTotal, with 3 out of 95 engines detecting malicious activity. Additionally, the domain appears on one security blocklist, and its SSL certificate is issued by Google Trust Services (WE1), further attempting to appear legitimate. Users who visited eq86zxc.pages.dev should immediately reset any credentials entered on the site, particularly Google account passwords. Enable multi-factor authentication on all critical accounts to mitigate unauthorized access. Monitor financial and communication platforms for suspicious activity, as stolen credentials may be used for follow-up attacks. Organizations should update web filtering rules to block this domain and its associated IP address to prevent further exposure.