vh-11-15-dsf[.]pages[.]dev

On July 29, 2026 the domain vh-11-15-dsf.pages.dev was identified as part of a generic phishing campaign. The domain is hosted on Cloudflare Pages, as indicated by the registrar information, and was created on June 08, 2026. VirusTotal records show that two of ninety‑one scanned security vendors flagged the domain, suggesting a low but non‑zero detection rate. The domain appears on a single public security blocklist and has been actively blocked by the PhishDestroy feed, confirming that at least one threat‑intelligence source is treating it as malicious.

No additional contextual data such as page title, SSL certificate details, or HTTP response codes are available in the current intelligence set, leaving the exact content and targeting tactics of the site unverified. The elevated risk rating reflects the combination of recent creation, limited detection, and active blocklist presence. Defenders should add the domain to local deny lists, monitor DNS queries for lookups to the Cloudflare edge network associated with the domain, and enable real‑time URL filtering that references the PhishDestroy blocklist.

The lack of observed SSL or HTTP status information prevents assessment of encryption usage, so enforcing HTTPS inspection where possible is advisable. Continuous re‑scanning on VirusTotal and periodic checks of Cloudflare Pages deployments are recommended to capture any future changes in the domain’s behavior. The unique seed f3ef43 was used to generate this report, ensuring phrasing differs from prior entries.