verify-badge-vip17[.]pages[.]dev

The domain verify-badge-vip17.pages.dev was created on 2020-09-02 and is hosted on Cloudflare Pages, resolving to IP 172.66.45.3. VirusTotal has recorded 14 detections out of 91 scanned security vendors, indicating that multiple anti‑malware engines have identified the domain as malicious. The domain appears on one public security blocklist and has been explicitly blocked by the PhishDestroy feed, reinforcing its classification as a credential‑phishing vector.

No additional public intelligence such as Safe Browsing verdicts, OTX references, or SSL certificate details is currently available, and the exact phishing content or targeted brand has not been disclosed. Defenders should block any outbound or inbound traffic to 172.66.45.3 and add verify-badge-vip17.pages.dev to local deny lists. Email security gateways should treat messages containing this domain as malicious and quarantine them.

Continuous monitoring of VirusTotal and other threat feeds is advised to capture any future changes in detection counts. Because the domain is served from Cloudflare Pages, standard sinkhole techniques may be limited; therefore, network‑level filtering is the most reliable mitigation. Until further forensic analysis of the site content is performed, the full scope of the credential‑phishing operation remains unknown.