webauthdashboard-c8x[.]pages[.]dev

Analysis of the domain webauthdashboard-c8x.pages.dev shows that it has been flagged by the PhishDestroy blocklist and currently appears on one public security blocklist. VirusTotal records indicate that the domain was submitted for scanning and examined by 91 antivirus and URL‑reputation engines; at the time of the latest scan none of the engines returned a positive detection. The absence of a detection does not constitute a validation of safety, as the domain remains listed as a phishing source in external blocklists.

The domain is hosted on the Google Cloud “pages.dev” platform, which provides free TLS certificates, so the site presents a valid HTTPS certificate without visible certificate errors. No additional metadata such as registrar, ASN, or hosting IP address has been disclosed in the available intelligence. The page title and any brand‑targeting information have not been published, leaving the exact visual content of the site unverified.

The current risk assessment is “under investigation” and the status is marked as active, indicating that the infrastructure is still operational and may be used to harvest credentials or deliver further malicious payloads. Defenders should continue to block the domain at perimeter and DNS filtering layers, monitor for any outbound connections to the associated IP ranges, and consider adding the domain to internal allow‑list exceptions only after a thorough manual review. Ongoing vigilance is recommended, including periodic re‑scans on VirusTotal and correlation with endpoint telemetry to detect potential exploitation attempts.