vormora-gld-belxita-c3x4hp74[.]pages[.]dev

The domain vormora-gld-belxita-c3x4hp74.pages.dev is currently classified as a generic phishing threat with an elevated risk rating. VirusTotal analysis indicates that 14 of 91 security vendors have flagged the domain, suggesting a moderate level of consensus among scanning engines regarding malicious intent. The domain is listed on a single public blocklist and is actively blocked by the PhishDestroy service, reinforcing the notion that defensive organizations consider it hostile.

Infrastructure observation shows that the domain resolves to the IPv4 address 172.66.44.129, a host commonly associated with cloud‑based hosting providers; no additional IPs or ASN details are provided in the available intelligence. No registrar information, SSL certificate details, HTTP response codes, or page‑title metadata have been disclosed, leaving those aspects of the environment unverified. Consequently, the precise hosting arrangement, certificate legitimacy, and content served at the URL remain uncertain.

Defenders should continue to block DNS resolution to the observed IP address, enforce outbound traffic filtering for the domain, and incorporate the domain into existing phishing detection rules. Ongoing monitoring of VirusTotal reports and blocklist updates is advised to capture any changes in detection consensus or additional blocklist inclusions. Given the current evidence, proactive containment and continuous observation are recommended to mitigate potential credential harvesting or data exfiltration attempts that may originate from this infrastructure.