aaverelaydapp[.]pages[.]dev

The domain aaverelaydapp.pages.dev is currently flagged by the PhishDestroy blocklist and appears on one additional security blocklist. DNS resolution points to the IPv4 address 188.114.97.3, which is part of Cloudflare’s edge network, and the authoritative name servers are braden.ns.cloudflare.com and laila.ns.cloudflare.com, confirming that the domain is provisioned through Cloudflare, Inc. VirusTotal records indicate that the site has been scanned by 91 anti‑malware vendors; none of the vendors reported a detection at the time of analysis, but the absence of a detection does not constitute a safety guarantee. No public Safe Browsing, Open Threat Exchange, or similar reputation feeds have indexed the domain, and no SSL/TLS certificate details, HTTP status codes, or page title information are presently available in the collected intelligence.

The limited visibility suggests that the infrastructure is likely being leveraged for a targeted phishing campaign, with the attacker exploiting Cloudflare’s free hosting to obscure the true origin of the payload. Because the domain is actively resolving and is already listed on a blocklist, defenders should treat it as malicious until further analysis proves otherwise.

Recommended mitigations include adding the domain and its resolved IP address to network‑level deny lists, configuring web proxies to block HTTP requests to the host, and monitoring DNS queries for the associated name servers. Continuous re‑scanning on VirusTotal and periodic checks against emerging blocklists are advised to capture any future changes in the threat posture.