peravelatylitred[.]pages[.]dev

Analysis of peravelatylitred.pages.dev indicates an active phishing infrastructure hosted on Cloudflare Pages, a platform frequently exploited for rapid deployment of fraudulent sites. The domain was registered on June 8, 2026, and remains operational as of July 29, 2026. Security vendor detections on VirusTotal show 14 of 91 engines flagging the domain, a moderate but notable signal given the platform's typical evasion tactics. The domain appears on four security blocklists and is explicitly blocked by PhishDestroy, MetaMask, ScamSniffer, and SEAL, suggesting targeted mitigation efforts against this infrastructure.

Infrastructure analysis reveals the domain is served directly through Cloudflare's Pages service, which provides static hosting with minimal registration friction. No specific brand impersonation, phishing kit, or scam category has been confirmed in available data, though the presence of MetaMask and ScamSniffer blocks may imply a cryptocurrency-related vector. The exact content of the site remains unanalyzed; no page title, login forms, or visual indicators are documented in current intelligence. Defenders should treat this domain as high-risk based on cumulative detection and blocklist data.

Network-level blocking is recommended, particularly for organizations exposed to cryptocurrency or financial fraud risks. Monitoring for related subdomains or newly registered Pages.dev domains with similar naming patterns may help identify adjacent threats. Given Cloudflare's role as the hosting provider, takedown requests should be directed through their abuse reporting channels with evidence of fraudulent activity.