alkem-layer[.]pages[.]dev

The domain alkem-layer.pages.dev is identified as a high-risk generic phishing site, currently active. It does not appear to impersonate any specific brand but is designed to capture user credentials or other sensitive information. The domain was created on December 01, 2024, and is registered through Cloudflare, Inc.

Analysis indicates that the domain alkem-layer.pages.dev is flagged by 2 out of 95 security vendors on VirusTotal, suggesting a moderate level of suspicion. The domain resolves to the IP address 172.66.44.100, which is located in the United States and is part of Cloudflare, Inc.'s Autonomous System (AS13335). The SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of security to potential victims. The domain appears on 4 security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL, further indicating its malicious nature.

The current status of alkem-layer.pages.dev is active, and it is recommended that network administrators and security teams block access to this domain to prevent potential data breaches. Users should be educated to recognize and avoid phishing sites by verifying the URL and SSL certificate of any sign-in pages they visit. Additionally, implementing multi-factor authentication (MFA) can significantly reduce the risk of credential theft.