897b98b7[.]pages[.]dev

On August 07, 2026, the domain 897b98b7.pages.dev was identified as an active high‑risk phishing infrastructure. The domain appears on two public security blocklists and is currently listed by PhishDestroy and OpenPhish as a malicious site. VirusTotal scans show that 14 of 91 antivirus and URL‑reputation engines flagged the domain as malicious, indicating a moderate level of consensus among detection tools. Google Safe Browsing also classifies the domain under the “social engineering” category, reinforcing the phishing assessment.

DNS resolution points to the IP address 172.66.45.33; no additional hosting or ASN information was disclosed in the supplied intelligence. The combination of blocklist listings, multi‑vendor detections, and Safe Browsing labeling provides sufficient corroboration to consider the domain a confirmed phishing endpoint. Because the page content, SSL certificate details, HTTP response codes, and any associated page title have not been disclosed, the exact lure and credential‑collection mechanisms remain unknown.

Defenders should proactively block 897b98b7.pages.dev at perimeter filters, DNS resolvers, and endpoint protection solutions. Monitoring traffic to the underlying IP 172.66.45.33 for anomalous connections is also advised, as the host may serve additional malicious payloads. Ongoing observation of blocklist updates and VirusTotal re‑scans is recommended to capture any changes in the threat posture.