allahroblox[.]pages[.]dev

On July 29 2026 the domain allahroblox.pages.dev was observed operating as a generic phishing infrastructure with an elevated risk rating. The domain is registered through Cloudflare, Inc., and utilizes Cloudflare’s authoritative name servers eugene.ns.cloudflare.com and holly.ns.cloudflare.com. DNS resolution points to the IP address 172.66.44.153, which is owned by Cloudflare’s edge network, indicating the site is hosted behind a CDN that can obscure the underlying web server location.

The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy feed, confirming that threat‑intelligence communities have identified it as malicious. VirusTotal analysis shows that 14 of 91 security vendors have flagged the domain as malicious, providing independent corroboration of its phishing nature. The infrastructure is currently listed as active, and the elevated risk level reflects the combination of its hosting on a reputable CDN, the presence on blocklists, and multiple vendor detections.

No public page title, SSL certificate details, or additional content analysis are available at this time, leaving the precise lure or credential‑capture mechanism unconfirmed. Defenders should add all known host identifiers—domain name, IP address, and associated Cloudflare name servers—to outbound filtering and DNS sinkhole rules. Continuous monitoring of the IP range and periodic re‑scanning with multi‑vendor services are recommended to detect any changes in the underlying payload or hosting configuration.