flower-bzt[.]pages[.]dev

The domain flower-bzt.pages.dev was created on January 15, 2025 and is hosted on Cloudflare Pages, as indicated by the registrar information. DNS resolution points to the IPv4 address 172.66.45.28, which belongs to Cloudflare’s edge network. The domain currently appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, suggesting that at least one reputable anti‑phishing feed has identified malicious activity associated with the host.

VirusTotal records show that the domain has been scanned by 91 antivirus and URL‑reputation vendors; none of the vendors returned a positive classification at the time of analysis. While the absence of detections does not constitute a safety guarantee, it indicates that the domain has not yet triggered automated signatures in the surveyed engines. The threat type is listed as generic phishing and the risk level is marked as under investigation, with the operational status flagged as active.

No additional intelligence such as page titles, brand targeting, or payload details is presently available, leaving the exact phishing vector and victim profile unconfirmed. Defenders should consider adding the domain to outbound and inbound filtering rules, monitor DNS queries for the associated IP address, and keep the domain under observation for any future changes in detection status or blocklist inclusion. Continuous re‑evaluation against emerging threat intel feeds is recommended to adjust mitigation measures promptly.