# 17a2e78d.connewall.pages.dev — MALICIOUS

> Stay safe from phishing threats on 17a2e78d.connewall.pages.dev. This domain is flagged for social engineering.

## Summary
PhishDestroy identifies 17a2e78d.connewall.pages.dev as a high-risk generic phishing domain. It was created recently and classified based on multiple threat intelligence sources.

Technical indicators include its resolution to IP 172.66.47.203, registration through Cloudflare, and a flag by Google Safe Browsing for social engineering. VirusTotal marks it suspicious with 15 out of 95 vendors identifying malicious activity, and it is listed on one security blocklist.

Currently, the domain is offline following detection and takedown efforts. Users are advised to remain vigilant and avoid engagement with this domain to prevent credential compromise.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.203
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "CyRadar", "ESET", "Emsisoft", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Lionic", "Netcraft", "Phishing Database", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019c5729-e44f-72b8-b0c5-75dafc9f6887.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/1de8524c-9ce2-45b0-bda8-03f174644f92
- PhishDestroy: https://phishdestroy.io/domain/17a2e78d.connewall.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/17a2e78d.connewall.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/17a2e78d.connewall.pages.dev/
Last updated: 2026-03-19