fluxverify[.]pages[.]dev

fluxverify.pages.dev is currently flagged as a credential‑phishing site. The domain is hosted behind Cloudflare, Inc. and resolves to the IPv4 address 172.66.44.187. Its authoritative nameservers are ainsley.ns.cloudflare.com and devin.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. The domain appears on one external security blocklist and is also listed by the PhishDestroy feed, confirming that threat‑intelligence providers have observed malicious activity associated with it.

VirusTotal analysis shows that 10 of 91 scanned security vendors classify the domain as malicious, providing independent confirmation of its suspicious nature. No public page title or targeted brand information is available in the current intelligence set, so the exact credential‑collection vector cannot be confirmed at this time. Infrastructure evidence suggests the operator is leveraging Cloudflare’s edge network to hide the true origin of the hosting server, a common technique used to evade takedown attempts. Defenders should immediately block DNS resolution for fluxverify.pages.dev on corporate resolvers, add the IP address 172.66.44.187 to network‑level deny lists, and include the domain in email and web‑filtering policies that target credential‑phishing indicators.

Continuous monitoring of Cloudflare‑related traffic to this address is advised, as the underlying hosting may shift while retaining the same domain. Where possible, security teams should enrich alerts with the VirusTotal detection count (10/91) and note the presence on the PhishDestroy feed to prioritize investigation. Until a definitive page‑content analysis is performed, the domain should be treated as high‑risk for credential harvesting attempts.