homepages-live[.]pages[.]dev

Technical analysis of homepages-live.pages.dev indicates elevated risk due to active phishing activity. The domain was created on October 17, 2025 and is currently hosted on IP address 172.66.44.210. Evidence shows the domain is registered via Cloudflare Pages, a platform commonly leveraged for rapid deployment of content, including by threat actors. On July 29, 2026, this domain remains active and is flagged by nine out of ninety-one security vendors on VirusTotal, highlighting substantial consensus among industry threat detection sources.

Additionally, it has been blocked by PhishDestroy, a security service specializing in phishing detection, and appears on one established security blocklist. This blocklisting underscores its recognition in threat intelligence feeds, though only one blocklist is currently reporting it, suggesting detection is not yet widespread across all threat ecosystems. The domain’s specific content and target are not yet analyzed, thus the exact nature of the phishing threat is undetermined, whether it involves credential theft, financial fraud, or other malicious activity.

There are no details regarding SSL certificate status, HTTP responses, or page title, and no evidence links are provided. In the absence of further contextual information, defenders are advised to initiate blocking of homepages-live.pages.dev within their networks and monitor for related activity, especially given its active status and multi-vendor detections. Continuing surveillance is warranted as additional intelligence may emerge confirming the scope and impact of this phishing campaign.