what-is-ubisoft-connect-reddit[.]pages[.]dev

PhishDestroy has flagged the domain what-is-ubisoft-connect-reddit.pages.dev as a credential theft phishing page impersonating Ubisoft’s Reddit community. The site leverages Cloudflare Pages to host a spoofed login portal designed to harvest user credentials under the guise of a Ubisoft Connect support thread. Security teams should treat this as a live threat, as the infrastructure relies on trusted providers (Cloudflare for hosting and Google Trust Services for SSL) to increase trustworthiness and bypass initial scrutiny. This domain was registered through Cloudflare, Inc. and currently resolves to IP 172.66.47.84. According to VirusTotal scans, it remains undetected by 95 security engines with a 1/95 detection ratio. While the exact creation date isn’t publicly available, the domain is actively resolving and serving content, indicating recent deployment. The use of a Cloudflare Pages subdomain and a legitimate SSL certificate from Google Trust Services suggests an attempt to blend in with legitimate Ubisoft or Reddit-related infrastructure. Given the lack of detections, this domain poses a significant risk to users seeking official support or engagement with Ubisoft’s platforms. Organizations and users who may have accessed this domain should immediately rotate any credentials entered on the site and enable multi-factor authentication on all Ubisoft accounts. Network defenders are advised to block traffic to 172.66.47.84 and the domain at the firewall and DNS level. Monitor for any unusual login attempts or data exfiltration patterns linked to this domain. Users should verify all support links by visiting Ubisoft’s official website directly and avoid clicking on Reddit or third-party shortened URLs claiming to offer official support.