wmt1-7ckc8-8awo-2u7x[.]pages[.]dev

This report details a threat identified on the domain wmt1-7ckc8-8awo-2u7x.pages.dev. The site's page title was "Facebook - Connexion ou inscription" and it was classified as an impersonation scam specifically targeting the brand Facebook. The primary threat posed by this site was credential harvesting, as it was designed to deceive users into entering their login credentials for Facebook by presenting a fraudulent login page.

Technical evidence confirms the malicious nature of this domain. VirusTotal data shows 10 out of 95 security vendors flagged the site, including ADMINUSLabs, DNS8, ESET, Emsisoft, and G-Data. The domain was registered through Cloudflare, Inc. and was created on 2026-03-09. The IP address 157.240.0.35, located in the United States, is associated with AS13335 Cloudflare, Inc. The site used an SSL certificate issued by Let's Encrypt (E8). The nameservers were alex.ns.cloudflare.com and joyce.ns.cloudflare.com.

The domain is currently reported as DOWN/OFFLINE. Risk assessment scores indicate a very high threat level, with a GridinSoft trust score of 0 out of 100, a ScamAdviser trust score of 1 out of 100, and a DOM risk score of 78. Based on the available data, this domain represents a significant security risk and should be treated as malicious.