finance-tango-web[.]pages[.]dev

The domain finance-tango-web.pages.dev is confirmed to be a credential theft site. As of the latest assessment, the domain is currently offline. The site was suspected of impersonating financial services, aiming to steal user credentials and sensitive information.

Analysis of the domain reveals that it was registered through Cloudflare, Inc. on September 02, 2020. The domain resolves to the IP address 188.114.97.3, which is located in the United States and belongs to Cloudflare, Inc. (AS13335). The SSL certificate for the domain is issued by Google Trust Services / WE1. The domain has been flagged by 12 out of 95 security vendors on VirusTotal, indicating a high level of suspicion among security experts. Additionally, the site appears on three security blocklists, further corroborating its malicious nature. Security tools such as PhishDestroy, MetaMask, and SEAL have also identified and blocked this domain, enhancing the credibility of the threat assessment.

Given the current offline status of finance-tango-web.pages.dev, it is recommended that all potential victims who may have interacted with the site monitor their financial accounts and online credentials for any signs of unauthorized activity. Organizations and individuals should ensure that they are using up-to-date security measures, including two-factor authentication and regular password updates, to mitigate the risk of credential theft. Network administrators should consider adding this domain to their DNS blocklists and educating users about the importance of verifying URLs and domain names to avoid falling victim to similar phishing campaigns.