meta-wollat-portal[.]pages[.]dev

The domain meta-wollat-portal.pages.dev is a confirmed generic phishing site designed to steal user credentials through credential phishing tactics. It does not impersonate a specific brand or use a known drainer kit. As of the latest verification, meta-wollat-portal.pages.dev has been taken offline, but it previously posed a high risk to visitors.

Technical analysis shows that meta-wollat-portal.pages.dev was flagged by 11 of 95 VirusTotal security vendors, including ADMINUSLabs, ChainPatrol, and alphaMountain.ai. Google Safe Browsing classified it as a social engineering threat under the label 'SOCIAL_ENGINEERING'. The domain was registered through Cloudflare, Inc. on October 17, 2025, and resolved to the IP address 172.66.47.126, hosted on Cloudflare's US-based infrastructure (AS13335). It appeared on one security blocklist, PhishDestroy, and used an SSL certificate issued by Google Trust Services / WE1. The observed page title was 'Suspected phishing site | Cloudflare', and the HTTP status returned was 403. Technologies detected on the site included HSTS, Cloudflare, and HTTP/3.

Users who may have interacted with meta-wollat-portal.pages.dev should immediately change any passwords entered on the site, enable two-factor authentication (2FA) on all critical accounts, and monitor for signs of fraud or unauthorized access. To report the domain, victims can submit it to Google Safe Browsing, PhishTank, or their organization's security team for further investigation. If financial or crypto accounts were compromised, additional steps such as revoking token approvals or contacting financial institutions may be necessary.