# normiebase-allocations.pages.dev — MALICIOUS

> normiebase-allocations.pages.dev was flagged as a high-risk phishing site. Learn about its risks, IP details, and current offline status.

## Summary
PhishDestroy identifies normiebase-allocations.pages.dev as a high-risk generic phishing domain. The site aimed to deceive users, though the exact impersonation target remains unclear. It was detected on multiple security blocklists, underscoring its malicious intent.

The domain was registered on March 10, 2026, via Cloudflare, Inc. It resolved to IP 172.66.47.24 and was flagged by 11 out of 95 VirusTotal security vendors. The domain appeared on two separate security blocklists, indicating active monitoring by cybersecurity entities.

Currently, normiebase-allocations.pages.dev is offline and inaccessible. Users and organizations should remain vigilant against similar Cloudflare-hosted phishing pages and maintain updated security measures to prevent credential theft and other phishing-related risks.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-10 13:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.24
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: alexis.ns.cloudflare.com love.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 11 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "Chong Lua Dao", "CyRadar", "ESET", "Fortinet", "G-Data", "Lionic", "Phishing Database", "Sophos", "VIPRE"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd797-dc38-73c8-b48a-6fa387d92194.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/9ef9df9d-89b1-4b70-882d-ef9dc0c1cf2c
- PhishDestroy: https://phishdestroy.io/domain/normiebase-allocations.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/normiebase-allocations.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/normiebase-allocations.pages.dev/
Last updated: 2026-03-19