btrzp63skrp-xjnshhb-2c1f8d-btq99c[.]pages[.]dev

Analysis of the domain btrzp63skrp-xjnshhb-2c1f8d-btq99c.pages.dev, registered under Cloudflare Pages, indicates active phishing infrastructure as of August 07, 2026. The domain resolves to IP address 172.66.47.59, which is part of Cloudflare's network, a common hosting choice for phishing campaigns due to its free tier and proxy services. At the time of assessment, seven of ninety-one security vendors on VirusTotal flagged the domain as malicious, while one security blocklist has included it, corroborating its elevated risk status.

No specific brand impersonation or phishing kit details are currently available, and the exact content of the page remains unanalyzed. The domain was blocked by PhishDestroy, suggesting detection based on behavioral or heuristic indicators rather than brand-specific signatures. Defenders should treat this domain as part of a generic phishing operation, prioritizing blocking at the network level and monitoring for related indicators of compromise.

Further investigation into associated URLs, SSL certificates, or redirect chains may provide additional context, though no such data is presently available. The lack of widespread blocklist inclusion does not diminish the risk, as phishing domains on Cloudflare Pages often evade initial detection due to rapid deployment and short lifespans.