guide-live-742[.]pages[.]dev

Analysis of the domain guide-live-742.pages.dev, observed on July 29 2026, indicates that it is being used for generic phishing. DNS resolution points to the IPv4 address 172.66.47.148, which is hosted by Cloudflare, Inc., as reflected by the authoritative name servers candy.ns.cloudflare.com and ishaan.ns.cloudflare.com. The domain is registered through Cloudflare, a service that often provides privacy‑protective registration, making attribution of the underlying actor difficult.

The domain appears on a single security blocklist and has been flagged by the PhishDestroy sinkhole, confirming that threat‑intelligence feeds consider it malicious. VirusTotal has processed the domain with scans from 91 antivirus and URL‑reputation vendors; none have raised a detection at the time of analysis, but the report explicitly notes that a lack of detections does not constitute evidence of safety. No additional public intelligence such as OTX references, Safe Browsing alerts, or SSL certificate details were supplied, and the page title or any brand targeting information has not been disclosed, leaving the exact phishing lure unknown.

Given the confirmed malicious classification by PhishDestroy and the presence on a blocklist, defensive operators should block network traffic to guide‑live‑742.pages.dev, add the domain to URL filtering policies, and continue monitoring for any changes in reputation or hosting characteristics. Continuous re‑evaluation is recommended, as the infrastructure could be repurposed or additional indicators may emerge.