xy-finance[.]pages[.]dev

xy-finance.pages.dev has been flagged with a generic phishing risk level under active investigation (unique seed f789a6). This domain impersonates a legitimate financial interface, aiming to harvest login credentials or payment details through deceptive prompts and cloned layouts. Users should treat all interaction as potentially malicious until further analysis confirms otherwise.

This threat assessment draws on multiple data points: VirusTotal currently lists 1 of 95 engines detecting the site, indicating no current widespread blocklist recognition; the domain is registered through Cloudflare, Inc. and resolves to IP 172.66.44.104 under Google Trust Services SSL; despite the clean scan, the lack of detection does not confirm safety and aligns with known phishing patterns that evade initial AV signatures.

To mitigate exposure, avoid clicking links or entering any personal or financial data into xy-finance.pages.dev. Report the domain to your browser or security provider using the seed identifier f789a6. Enable two-factor authentication on real financial accounts and verify site legitimacy via official channels before proceeding with any transactions or logins.