bath-slippers[.]pages[.]dev

Analysis conducted on July 29, 2026 identifies bath-slippers.pages.dev as an active phishing domain hosted on Cloudflare infrastructure. The domain is registered through Cloudflare, Inc. and resolves to the IP address 172.66.46.223, associated with Cloudflare's network. Nameservers cora.ns.cloudflare.com and dale.ns.cloudflare.com further confirm the hosting provider. At the time of assessment, the domain appears on one security blocklist and is actively blocked by PhishDestroy.

VirusTotal analysis indicates that 3 of 91 security vendors flag the domain as malicious, though the specific nature of the phishing content remains unconfirmed due to the absence of detailed page analysis or brand targeting information in available intelligence. Infrastructure analysis reveals no anomalies in registration or DNS configuration beyond its use of Cloudflare's services, which are frequently leveraged by both legitimate and malicious actors. The domain's HTTP status, SSL certificate validity, and additional trust scores are not provided in current intelligence, limiting further technical assessment.

Defenders are advised to treat this domain as an active threat, particularly given its presence on a security blocklist and detection by multiple vendors. Network-level blocking of 172.66.46.223 and the domain itself is recommended for organizations using PhishDestroy or compatible threat feeds. Further investigation into the phishing kit or campaign associated with this domain is warranted, though no evidence of a specific brand impersonation or scam type is currently available.