# wmt1-7ckc8-8awo-2u7x.pages.dev — MALICIOUS

> Review safety status of wmt1-7ckc8-8awo-2u7x.pages.dev. Stay cautious and avoid sharing personal info on suspicious sites.

## Summary
PhishDestroy identifies wmt1-7ckc8-8awo-2u7x.pages.dev as a domain associated with low-risk generic phishing activity. While only a single security vendor flagged the domain, caution is advised due to its potential use in deceptive schemes attempting to acquire sensitive user data.

This domain is registered through Cloudflare, Inc. and resolves to the IP address 172.66.46.234. Hosting under Cloudflare suggests it benefits from a reputable infrastructure, but the domain’s structure—being a subdomain under pages.dev—indicates it may be leveraging free or low-cost hosting platforms commonly exploited by phishing actors.

Currently, the domain remains active and under observation. Users should avoid interacting with it or providing any personal credentials. PhishDestroy recommends maintaining vigilance, employing updated security tools, and reporting any suspicious activity encountered on this or similar domains to help mitigate potential risks.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-09 01:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.46.234
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: alex.ns.cloudflare.com joyce.ns.cloudflare.com
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 10 vendors flagged
  Vendors: ["ADMINUSLabs", "DNS8", "ESET", "Emsisoft", "G-Data", "Gridinsoft", "Netcraft", "Phishing Database", "Sophos", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ccffe-8991-760b-866e-62910a39595a.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/81a20352-0449-44c8-bce4-423dec7cbaf0
- Wayback Machine: https://web.archive.org/web/https://wmt1-7ckc8-8awo-2u7x.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/wmt1-7ckc8-8awo-2u7x.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/wmt1-7ckc8-8awo-2u7x.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/wmt1-7ckc8-8awo-2u7x.pages.dev/
Last updated: 2026-03-19