downloaderto-fb[.]pages[.]dev

On July 29, 2026 the domain downloaderto-fb.pages.dev was observed as an active generic phishing infrastructure with an elevated risk rating. The domain is registered through Cloudflare, Inc., and its authoritative name servers are listed as hugh.ns.cloudflare.com and leanna.ns.cloudflare.com, indicating that the hosting provider also supplies DNS resolution. Network resolution points to the IPv4 address 188.114.96.3, which is the sole host associated with the domain in the current data set.

Threat intelligence aggregators have recorded the domain on a single security blocklist, and the anti‑phishing service PhishDestroy has already blocked it. VirusTotal reports that two of ninety‑one scanned security vendors have flagged the domain, confirming that at least a minority of automated scanners recognize malicious behavior. No additional evidence such as SSL certificate details, HTTP response codes, page title, or Safe Browsing verdicts is available in the current intelligence feed.

Consequently, the exact content hosted on the site remains unverified, though the classification as generic phishing is supported by the existing vendor detections and blocklist entries. Defenders should prioritize adding downloaderto-fb.pages.dev to DNS‑based deny lists and firewall rules, enforce outbound traffic inspection to the IP address 188.114.96.3, and monitor for any future changes in detection scores or additional blocklist listings. Continuous re‑evaluation is advised, as the low number of vendor flags suggests that the domain may evolve its tactics or expand its hosting footprint.