bonkreward-7ym[.]pages[.]dev

Analysis of bonkreward-7ym.pages.dev shows a recently observed domain that resolves to the IP address 188.114.97.3. The domain is served through Cloudflare, Inc., as indicated by the registrar information and the authoritative nameservers emerson.ns.cloudflare.com and luciane.ns.cloudflare.com. Cloudflare’s edge network masks the underlying hosting environment, limiting direct attribution of the server infrastructure.

The domain is currently listed on a single public security blocklist and has been actively blocked by the PhishDestroy feed, confirming that defensive operators have already taken mitigation steps. VirusTotal reports that four out of ninety‑one scanned security vendors have flagged the domain, providing modest but tangible detection confidence. No additional public reputation services, such as Google Safe Browsing or Open Threat Exchange, are referenced in the supplied intelligence, and no page title or brand target has been disclosed, leaving the exact phishing lure undefined.

Given the limited but consistent signals—Cloudflare registration, presence on a blocklist, multiple vendor detections, and active blocking by PhishDestroy—the domain should be treated as a high‑confidence phishing indicator. Defenders are advised to add bonkreward-7ym.pages.dev to DNS‑based deny lists, ensure web‑proxy and email gateways block any HTTP or HTTPS traffic to the domain, and monitor outbound connections to the associated IP address for potential command‑and‑control or data exfiltration activity. Continuous re‑evaluation is recommended, as further analysis of the hosted page content may reveal the targeted brand or credential‑collection technique, allowing more precise remediation.