maiv-whitelist[.]pages[.]dev

The domain maiv-whitelist.pages.dev is a confirmed generic phishing site designed to steal user credentials through credential phishing tactics. It does not impersonate a specific brand or deploy a known drainer kit. As of the latest verification, maiv-whitelist.pages.dev has been taken offline, though it previously posed an elevated risk to visitors.

Technical analysis shows that maiv-whitelist.pages.dev was flagged by 1 of 95 VirusTotal security vendors, including Fortinet, and appears on 5 security blocklists such as PhishDestroy, ScamSniffer, and Polkadot. The domain was registered through Cloudflare, Inc. on December 27, 2024, and resolved to the IP address 172.66.46.250, hosted by Cloudflare in the US. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Suspected phishing site | Cloudflare'. Technologies detected include HSTS, Cloudflare, and HTTP/3, with the site returning an HTTP 403 status. Gridinsoft and Scamadviser assigned trust scores of 0/100 and 1/100, respectively.

Users who may have interacted with maiv-whitelist.pages.dev should immediately change passwords for any accounts accessed during the exposure period, enable two-factor authentication (2FA), and monitor accounts for unauthorized activity. Victims are advised to report the phishing domain to their email provider, browser vendor, and platforms like Google Safe Browsing or PhishTank to aid in broader mitigation efforts.