revokes-aereocom[.]pages[.]dev

Analysis dated July 29, 2026 indicates that the domain revokes-aereocom.pages.dev is actively leveraged for generic phishing campaigns aimed at harvesting user credentials. The domain resolves to the IP address 188.114.96.3 and is hosted behind Cloudflare, Inc., as evidenced by its authoritative nameservers ashton.ns.cloudflare.com and nancy.ns.cloudflare.com. VirusTotal scans have recorded detections from eight out of ninety‑one security vendors, confirming that multiple independent engines flag the site as malicious.

Additional defensive services, including PhishDestroy, MetaMask, and SEAL, have listed the domain on their blocklists, and the domain appears on three external security blocklists, further corroborating its malicious status. The registration through Cloudflare obscures direct registrant details, leaving the true operator unidentified. No public information on SSL certificate details, HTTP response codes, or page content has been disclosed, making the exact landing page characteristics uncertain.

Defenders should continue to block the domain at network perimeter controls, update URL filtering policies, and monitor for any traffic to the associated IP address. Continuous re‑scanning with VirusTotal and similar aggregators is advised to capture any changes in detection ratios, and security teams should share any newly observed indicators of compromise with threat‑intel communities to improve collective defense.