ftoejakasffmmaktifpencairaan[.]pages[.]dev

The domain ftoejakasffmmaktifpencairaan.pages.dev has been identified as a potential vector for credential theft. Currently, the domain's status is offline after intervention measures were taken. Analysis indicates that this domain was used as part of a phishing campaign, potentially impersonating well-known brands to deceive users into revealing sensitive information. Visibility of the phishing activity was detected early, leading to its inclusion on one security blocklist.

Technical indicators confirm that the domain was flagged by 17 out of 95 security vendors on VirusTotal. The domain was registered through Cloudflare, Inc. and created on June 10, 2025. It resolved to the IP address 188.114.97.3, hosted in the United States, under the Autonomous System Number (ASN) 13335, managed by Cloudflare, Inc. The site was also protected by an SSL certificate issued by Google Trust Services, adding a layer of legitimacy to the fraudulent activities.

Currently, the domain remains offline, reducing immediate threat levels. It is recommended for organizations to update their threat intelligence feeds with this domain's details to prevent future exposure. Implementing or enhancing email and web filtering solutions will help in mitigating risks from similar phishing domains. Continuous monitoring for any reactivation or similar domain registrations is advised to disrupt potential threat actor activities.