MALICIOUS — CRITICAL
galaxyfox[.]pages[.]dev
This domain galaxyfox.pages.dev is currently under investigation for credential theft, a specific type of phishing threat aimed at deceiving users into revealing sensitive login information.
- VirusTotal
- 6/94
- Blocklists
- 1 · ScamSniffer
- 可用性
- 可达 · 访问受限 · HTTP 403
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
galaxyfox.pages.dev — 可达 · 访问受限 (HTTP 403). 品牌冒充:Genericcrypto; 诈骗类型:Credential Phishing. 证据摘要: VirusTotal 6/94 (ADMINUSLabs, alphaMountain.ai, ESET, Fortinet, Kaspersky); URLScan malicious verdict; 1 external blocklist match (ScamSniffer); PhishDestroy score 73/100. 注册商: Cloudflare.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Evidence Analysis
This domain galaxyfox.pages.dev is currently under investigation for credential theft, a specific type of phishing threat aimed at deceiving users into revealing sensitive login information. The risk level remains active as the potential threat to user credentials could lead to unauthorized account access and identity compromise.
The domain galaxyfox.pages.dev has 0 detections out of 95 engines on VirusTotal, indicating it has not yet been flagged by antivirus providers, which can make it harder for users to identify it as malicious. It resolves to the IP address 172.66.44.101 and is registered through Cloudflare, Inc., a popular registrar often used by both legitimate and malicious websites due to its ease of setup and CDN services. The SSL certificate is issued by Google Trust Services, which might give users a false sense of security due to the presence of HTTPS. No additional blocklist or trust score data is available, but the active status and investigative risk level suggest caution.
To mitigate the credential theft risk posed by galaxyfox.pages.dev, users should refrain from submitting any login or personal information on this domain or any similar pages. It is advised to verify URLs carefully and use multifactor authentication on sensitive accounts where possible. Security solutions should be kept updated, and suspicious domains reported to administrators or security teams for monitoring and potential blocking. Regular user education about phishing techniques remains vital to prevent credential compromise.
数据覆盖范围12 recorded checks
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
取证情报
所用技术 · 6 identified
Free public CDN for open-source projects, serving files from npm and GitHub.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of galaxyfox.pages.dev · checked Apr 15, 2026
证据与外部报告Independent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。