hbgpk41kzp-wxlng84mvr-9d2c6f-sjy17p[.]pages[.]dev

This domain is flagged as a generic phishing threat with an elevated risk level and remains active as of the report date of August 03, 2026. The domain hbgpk41kzp-wxlng84mvr-9d2c6f-sjy17p.pages.dev is hosted on Cloudflare Pages, which serves as both the registrar and hosting infrastructure. Infrastructure analysis reveals that the domain is listed on two independent security blocklists, specifically PhishDestroy and OpenPhish, indicating that the domain has been actively observed and categorized as malicious by third-party threat intelligence sources. VirusTotal data shows that 15 out of 91 security vendors flag this domain as malicious, a substantial detection rate that corroborates the blocklist entries and supports the elevated risk assessment.

The domain was not reported in Google Safe Browsing or AlienVault OTX in the available intelligence, and no SSL certificate details, HTTP status code, or page title were provided for further analysis. The exact content hosted on the domain has not been analyzed, so the specific phishing lure, brand impersonation, or credential-harvesting mechanism remains unconfirmed. The domain name itself is a randomized alphanumeric string followed by the pages.dev suffix, a pattern commonly associated with disposable or short-lived phishing infrastructure, although this is an observational characteristic rather than a definitive proof of malice.

Defenders should treat this domain as a confirmed phishing indicator based on the blocklist presence and the 15-vendor detection rate. Recommended actions include blocking the domain at the DNS or proxy level, monitoring logs for any attempted access, and reviewing email or messaging traffic for links pointing to this domain. Since the hosting is on Cloudflare Pages, reporting the domain to Cloudflare's abuse team may result in suspension, though the operator may pivot to new domains.