wammapoke-voifruwop-f2d180[.]pages[.]dev

The domain wammapoke-voifruwop-f2d180.pages.dev was observed on July 29, 2026 and is currently classified as an active generic phishing infrastructure with an elevated risk rating. Registration data shows the domain is provisioned through Cloudflare, Inc., and its authoritative DNS records list chip.ns.cloudflare.com and novalee.ns.cloudflare.com as the sole nameservers. DNS resolution points to the IP address 188.114.97.3, a Cloudflare edge node that is commonly used to hide the true origin of malicious sites.

VirusTotal analysis indicates that 13 of 91 security vendors have flagged the domain, demonstrating a moderate consensus among scanning engines that the site is malicious. The domain is listed on a single public security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, reinforcing the confidence that it is being used for phishing attempts. No additional intelligence such as page title, SSL certificate details, or specific brand impersonation has been released, leaving the exact content and target of the fraudulent page unknown.

Defenders should add the fully qualified domain to network and endpoint allow‑list exclusions, enforce URL filtering on corporate proxies, and monitor for any outbound connections to the associated IP address. Continuous re‑scanning with VirusTotal and similar services is advisable to capture any changes in detection status, while threat‑intel feeds should be consulted for updates on related indicators of compromise.