money-gummapp42[.]pages[.]dev

PhishDestroy identifies money-gummapp42.pages.dev as an active credential theft phishing domain designed to steal login details under false pretenses. Visitors are tricked into submitting sensitive information, which is then harvested by attackers for fraud or resale on dark web markets. The domain mimics legitimate services to appear trustworthy, making it a high-risk trap for unsuspecting users. This domain was flagged by only 1 out of 95 VirusTotal security vendors, resolving to IP 172.66.45.42 via Cloudflare. The SSL certificate, issued by Google Trust Services, adds a false sense of legitimacy. Registered through Cloudflare, Inc., the domain’s infrastructure is obscured, complicating takedown efforts. Its generic name and Cloudflare Pages hosting suggest an opportunistic campaign targeting users searching for financial tools or services. If you visited money-gummapp42.pages.dev, immediately change passwords for any accounts you entered credentials into. Run a malware scan on your device and monitor financial accounts for unauthorized activity. Report the domain to your browser’s security team or PhishDestroy to aid in its deactivation. Avoid clicking links from unsolicited emails or ads claiming to offer financial services.