smart-site-swiftappmegaverse[.]pages[.]dev

The domain smart-site-swiftappmegaverse.pages.dev is currently active and classified as a generic phishing threat with an elevated risk rating. Infrastructure analysis shows the domain is hosted on Cloudflare’s network, resolving to the IP address 172.66.47.46. The authoritative name servers are donald.ns.cloudflare.com and vera.ns.cloudflare.com, confirming the use of Cloudflare’s DNS service. Registration data indicates that the domain was provisioned through Cloudflare, Inc., which is consistent with the observed hosting configuration.

Reputation checks reveal that the domain is listed on one public security blocklist and has been blocked by the PhishDestroy mitigation service. VirusTotal scans show that 10 out of 91 security vendors have flagged the domain as malicious, providing additional corroboration of its phishing nature. No further detail on the specific vendor signatures is available, but the multi‑vendor detection rate suggests a measurable level of confidence among scanning engines.

While the available intelligence confirms the domain’s association with phishing activity, there is no publicly disclosed page title, SSL certificate details, HTTP response codes, or content analysis to further characterize the payload or targeted brand. Consequently, the precise phishing vector (e.g., credential harvesting page, malicious download) remains unknown.

Defenders should prioritize blocking the domain at network perimeter devices and updating endpoint allowlists to include the observed IP address and name server entries. Monitoring for DNS queries to donald.ns.cloudflare.com and vera.ns.cloudflare.com that resolve to 172.66.47.46 can help identify compromised hosts attempting to contact the malicious site. Security teams are advised to incorporate the domain into threat intelligence feeds and to share any newly observed indicators of compromise with community blocklists to accelerate collective mitigation.