appx-dispatcher[.]pages[.]dev

The domain appx-dispatcher.pages.dev is currently classified as a generic phishing infrastructure and remains active as of the report date, August 03, 2026. VirusTotal analysis shows that one out of ninety‑one security vendors has flagged the domain, indicating that at least a single detection engine identified malicious characteristics associated with the host. The domain is listed on a single security blocklist and is explicitly blocked by the PhishDestroy service, confirming that external threat‑intelligence providers consider it a source of credential‑stealing traffic.

No additional contextual data—such as registrar information, hosting IP address, autonomous system number, geographic location, SSL certificate details, HTTP response codes, or page‑title metadata—has been disclosed in the available intelligence set. Consequently, the precise operational footprint and the specific brand or service being spoofed remain unknown.

Defenders should continue to block network communications to the domain at perimeter controls, update endpoint detection signatures to include the observed indicator, and monitor for any related URL patterns that share the "pages.dev" suffix. Ongoing observation is advised to capture any future changes in detection counts or blocklist listings that could refine the risk assessment.