mkrjb946nhw-pldwffynt-5d8e7f-vzk49a[.]pages[.]dev

The domain mkrjb946nhw-pldwffynt-5d8e7f-vzk49a.pages.dev is currently flagged as an active generic phishing site with an elevated risk rating. Infrastructure analysis shows the domain is provisioned through Cloudflare Pages, indicating it is served from Cloudflare’s edge network but no specific IP address or ASN details are disclosed in the available intelligence. The domain appears on two external security blocklists and has been explicitly blocked by the PhishDestroy and OpenPhish feed providers, confirming that it is recognized by multiple threat‑intelligence sources.

VirusTotal scans report that 11 of 91 security vendors have marked the domain as malicious, providing additional corroboration of its malicious nature. The available data do not include a page title, brand targeting, or detailed content analysis, so the exact phishing lure or victim profile remains uncertain. Defenders should treat the domain as hostile: incorporate the domain into URL filtering and web‑proxy deny lists, enforce DNS‑level blocking where possible, and monitor outbound connections for attempts to resolve or contact the domain.

Continuous re‑scanning with VirusTotal and periodic checks of Cloudflare Pages registrations are advisable to capture any changes in hosting or detection status. Until further content analysis is performed, the domain should be considered a high‑confidence indicator of phishing activity and blocked at the network perimeter.