verify-badge-vip10[.]pages[.]dev

This domain, verify-badge-vip10.pages.dev, is flagged as a credential‑phishing infrastructure. Registration metadata indicate it was created on 2 September 2020 and is hosted on Cloudflare Pages, resolving to the address 172.66.44.250. VirusTotal analysis shows that 14 of 91 security vendors have marked the domain as malicious, providing a moderate consensus of compromise. The domain appears on one external blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its malicious reputation.

No additional public intelligence such as Safe Browsing verdicts, Open Threat Exchange (OTX) entries, SSL certificate details, or HTTP response codes have been published for this host, leaving the precise phishing payload and target brand undisclosed. The lack of a page‑title or content snapshot further limits attribution of the credential‑phishing campaign to a specific victim demographic. Defenders should therefore treat any traffic to verify‑badge‑vip10.pages.dev as hostile. Immediate actions include adding the domain to DNS‑based deny lists, configuring proxy or firewall rules to block outbound connections, and enabling URL filtering in web gateways.

Continuous monitoring of the 172.66.44.250 address for anomalous connections is advised, as Cloudflare’s shared infrastructure may host additional malicious assets. Incident response teams should also correlate internal logs for any authentication attempts routed through this domain and consider user education on unexpected badge‑related requests, given the domain’s naming pattern suggests a lure for credential harvesting. Until further analysis is available, a precautionary block is the most effective mitigation.