palm-81o[.]pages[.]dev

The domain palm-81o.pages.dev is currently flagged as an active generic phishing infrastructure with an elevated risk rating. Intelligence from two independent blocklists, PhishDestroy and ScamSniffer, shows the domain is already listed as malicious. VirusTotal analysis reports that 2 of 91 security vendors have generated a detection for the host, indicating that at least a minority of scanners have observed suspicious behavior. The domain is provisioned via Cloudflare Pages, a hosting service that often provides legitimate static site delivery but can also be abused for short‑lived phishing pages.

No additional metadata such as IP address, ASN, or geographic location is disclosed in the available feed, so the underlying hosting infrastructure cannot be fully profiled at this time. The limited detection count suggests the site may be newly deployed or employing evasion techniques that keep it under the radar of many scanners. Because the domain appears on multiple blocklists and has been identified by security vendors, defensive teams should block DNS resolution and HTTP requests to palm-81o.pages.dev at perimeter controls. Endpoint protection solutions that integrate VirusTotal verdicts should be configured to treat the two vendor detections as malicious.

Continuous monitoring of the domain’s status on VirusTotal and blocklist feeds is advised, as the detection landscape may evolve. Analysts should also consider investigating any recent traffic logs for connections to the domain, especially from users who may have received phishing emails referencing the host. Until further forensic evidence is collected, the recommendation is to treat palm-81o.pages.dev as a high‑confidence phishing indicator and enforce strict deny rules.