elon-musk-whatsapp[.]pages[.]dev

PhishDestroy identifies elon-musk-whatsapp.pages.dev as an active phishing site masquerading as a WhatsApp web portal, leveraging the Elon Musk brand to deceive visitors into surrendering sensitive information.

The domain elon-musk-whatsapp.pages.dev shows zero detections out of 95 VirusTotal engines as of the latest scan, indicating it currently evades most detection mechanisms. It resolves to IP 172.66.44.104, which is allocated to Cloudflare, Inc., the domain’s registrar. The SSL certificate, issued by Let’s Encrypt, establishes a false sense of legitimacy, while the page remains under active investigation with no established creation date provided in open sources. Trust scores, including those from threat intelligence platforms, remain low, and no prominent blocklists currently flag the domain despite its active hosting status.

The domain is confirmed as hosting a WhatsApp-themed phishing campaign targeting users seeking communication through false pretenses. As the threat remains active and undetected by the majority of scanning engines, users are strongly advised to avoid interacting with the domain and its subpages entirely. If unintended access occurs, credentials or personal details should not be entered under any circumstances. Organizations and end-users should update browser-based blocklists and network filters to include elon-musk-whatsapp.pages.dev with the highest priority. Further, enhanced monitoring for domains using similar naming conventions or hosting patterns is recommended to prevent broader exploitation of this brand impersonation tactic.