appl-2yo[.]pages[.]dev

The domain appl-2yo.pages.dev is currently classified as a high‑risk generic phishing infrastructure. Intelligence sources indicate that the domain is listed on two security blocklists and is actively blocked by the PhishDestroy and OpenPhish feed providers. Google Safe Browsing has flagged the domain for social engineering, confirming that the URL is associated with attempts to harvest credentials or personal data.

VirusTotal analysis shows that 15 out of 91 scanning engines have generated a detection, reinforcing the malicious reputation. DNS resolution points to the IP address 172.66.47.92, which is the sole hosting endpoint observed for this indicator. No additional metadata such as registrar details, SSL certificate information, HTTP response codes, trust‑score metrics, or page‑title content has been disclosed, leaving those aspects unverified at this time.

The lack of publicly available page content means that the exact phishing lure (e.g., brand impersonated) cannot be confirmed, and the specific payload or credential‑capture mechanisms remain uncertain. Defenders should prioritize blocking the domain and its resolved IP at network perimeter devices, update endpoint detection rules to include the observed VirusTotal signatures, and monitor for any outbound connections to 172.66.47.92. Continuous re‑evaluation is advised, as further analysis of the web content or TLS characteristics may reveal additional indicators that can improve detection fidelity.