ravlix-biz-sentox-1425[.]pages[.]dev

The domain ravlix-biz-sentox-1425.pages.dev is currently classified as a generic phishing site with an elevated risk rating. VirusTotal analysis shows that 15 of 91 security vendors have flagged the domain, indicating a non‑trivial level of detection across multiple scanning engines. The domain is hosted on Cloudflare Pages, a service that provides static site hosting and automatically provisions a shared Cloudflare edge network. DNS resolution points to the IP address 172.66.44.85, which is part of Cloudflare's infrastructure and does not by itself identify malicious intent, but the association with a known phishing classification warrants caution.

The domain was created on 2 September 2020, suggesting that the actor has maintained this resource for several years. It appears on a single external blocklist and is explicitly listed as blocked by the PhishDestroy service, confirming that at least one reputable anti‑phishing feed recognizes it as malicious. No additional intelligence such as Safe Browsing status, OTX references, or SSL certificate details is available in the current data set. Consequently, defenders should treat any traffic to this domain as suspicious and block it at the network perimeter or DNS layer.

Monitoring for outbound connections to the associated IP and correlating with internal logs for credential‑submission attempts is advisable. Because the hosting provider is a legitimate CDN, any remediation that targets the underlying infrastructure must be coordinated with Cloudflare if further investigation is required. In the absence of more granular indicators, the primary mitigation strategy remains blocking and continuous observation.