gelrix-biz-silvax-15126[.]pages[.]dev

The domain gelrix-biz-silvax-15126.pages.dev is a phishing site designed to trick users into giving away their Facebook login credentials. It mimics the official Facebook login page with a title reading "Facebook - log in or sign up," but any information entered is captured by attackers. This site poses a direct threat to anyone who might be tricked into logging in, potentially leading to account takeover, identity theft, or further scams.

PhishDestroy's investigation uncovered several red flags. The domain was created on March 3, 2026, and registered through Cloudflare, Inc., a common hosting provider for malicious sites. It resolves to IP address 57.144.172.1 and uses an SSL certificate from Google Trust Services, which can give a false sense of security. On VirusTotal, 15 out of 95 security vendors flagged this domain as malicious, and it appears on one security blocklist. The site is currently offline, but similar domains may still be active.

If you visited this site and entered any information, change your Facebook password immediately and enable two-factor authentication. Monitor your account for suspicious activity and report any unauthorized access to Facebook. Avoid clicking on links in unsolicited messages or emails, and always verify the URL before logging in. PhishDestroy continues to track these threats to keep users safe.