# api-xyzverse.pages.dev — SUSPICIOUS

> PhishDestroy identifies api-xyzverse.pages.dev as a live fake API phishing page hosted via Cloudflare Pages; resolves to 172.66.44.

## Summary
api-xyzverse.pages.dev has been flagged by PhishDestroy as an active fake API phishing domain. The site masquerades as a legitimate API service to harvest authentication tokens and user credentials. Current risk level is under_investigation while intelligence is validated, but users should treat it as hostile. 

This domain was registered through Cloudflare, Inc. and resolves to IP 172.66.44.84 using a Google Trust Services SSL certificate. As of the latest check it shows 0 detections out of 95 engines on VirusTotal and remains absent from all major blocklists. The Cloudflare Pages platform and Google Trust Services do not themselves indicate malice; they are legitimate infrastructure exploited by attackers. Creation date and further infrastructure details are pending additional OSINT correlation. 

To mitigate exposure, avoid any interaction with api-xyzverse.pages.dev or supplying credentials. If already visited, rotate passwords immediately, enable MFA where possible, and report the domain through your browser’s phishing report tool and to PhishDestroy with seed ddb034. Monitor accounts for unauthorized access and consider blocking the IP 172.66.44.84 at the network perimeter.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.84

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/63c85765-32b6-48ee-9085-c2a0f81d80ee
- PhishDestroy: https://phishdestroy.io/domain/api-xyzverse.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/api-xyzverse.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/api-xyzverse.pages.dev/
Last updated: 2026-03-27