lmoriw-iekascma-oqmmcq-213-cmakwe-fgacsax[.]pages[.]dev

This domain represents an elevated-risk brand impersonation threat targeting Facebook users through a fraudulent Business Help Center portal. Analysis indicates the site mimics Facebook's legitimate support infrastructure, presenting a fake Privacy Policy page to lend credibility to credential harvesting attempts. The domain is designed to deceive users into disclosing login credentials, payment details, or other sensitive information under the pretense of account verification or policy compliance. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on February 25, 2026, through Cloudflare, Inc., and resolves to IP address 188.114.97.3 within AS13335. Security vendors have flagged the domain at a rate of 20/95 on VirusTotal, while it appears on two independent security blocklists. The page title 'Business Help Center | Privacy Policy' directly mirrors Facebook's official terminology, and the SSL certificate issued by Google Trust Services (WE1) further enhances the illusion of legitimacy. Users who visited this domain should immediately take protective measures. Any credentials entered should be considered compromised and require immediate password resets across all platforms where identical or similar passwords were used. System scans using updated security tools are recommended to detect potential malware infections. Organizations should review authentication logs for unusual access patterns and consider implementing multi-factor authentication for all critical accounts. The domain's current offline status does not eliminate the risk, as threat actors frequently reactivate infrastructure or redirect victims to secondary domains.