noraxvasconcelos[.]pages[.]dev

The domain noraxvasconcelos.pages.dev is a high-risk phishing site engaged in brand impersonation targeting Microsoft. It was designed to mimic legitimate Microsoft services, likely for tech-support scam purposes, but did not deploy a crypto drainer kit. As of the latest verification, noraxvasconcelos.pages.dev has been taken offline.

Technical indicators confirm the malicious nature of noraxvasconcelos.pages.dev. The domain was flagged by 12 of 95 VirusTotal security vendors, including ADMINUSLabs, ChainPatrol, and alphaMountain.ai. It appears on 3 security blocklists (PhishDestroy, MetaMask, and SEAL) and was registered through Cloudflare, Inc. on March 13, 2026. The domain resolved to IP address 188.114.96.3, hosted by Cloudflare in the US, and used an SSL certificate issued by Google Trust Services / WE1. The observed page title was 'Nora X. Vasconcelos- Almire KarolinaTessa ClariceLelah StApril H Gibbs', and the site returned an HTTP 403 status. Technologies detected included WordPress, MySQL, PHP, and jQuery, among others.

Individuals who interacted with noraxvasconcelos.pages.dev should immediately change any passwords entered on the site, enable two-factor authentication on all accounts, and monitor for unauthorized access or fraudulent activity. Victims of tech-support scams should also scan their devices for malware and report the incident to Microsoft’s official support channels. The domain can be reported to Google Safe Browsing, PhishTank, and the registrar (Cloudflare) for further action.