tsess-29e[.]pages[.]dev

The domain tsess-29e.pages.dev has been identified as a brand impersonation threat specifically targeting Facebook users. This malicious site is currently offline, but while active it presented a fraudulent Facebook login page designed to steal credentials. The domain was created on April 3, 2026, and resolved to the IP address 188.114.97.3, registered through Cloudflare, Inc.

Security analysis reveals that tsess-29e.pages.dev appears on one security blocklist and has been flagged by 8 out of 95 VirusTotal vendors as malicious. The page title was set to "Facebook" to deceive visitors into believing they were on a legitimate Facebook login portal. The domain's registration through Cloudflare and its creation date are key indicators of its malicious intent, as threat actors often abuse such services for rapid deployment.

Although the site is now offline, users should remain vigilant against similar phishing attempts. PhishDestroy recommends always verifying URLs before entering credentials, especially for pages that request login information. If you have already interacted with this domain, change your Facebook password immediately and enable two-factor authentication. Report any suspicious links to PhishDestroy for further analysis and community protection.