defilma-io-en[.]pages[.]dev

The domain defilma-io-en.pages.dev, associated with a cryptocurrency phishing scam, has been taken offline. Despite its current status, it was previously flagged by 10 out of 93 vendors on VirusTotal and appeared on three public blocklists, including those maintained by PhishDestroy, MetaMask, and SEAL. Google Safe Browsing also flagged this domain, indicating its malicious intent.

The domain was registered through Cloudflare, Inc. and hosted on an IP address in the United States, specifically under Cloudflare's ASN. The SSL certificate was issued by Google Trust Services, which might have lent the site an air of legitimacy to unsuspecting users. The site was first detected by PhishDestroy in February 2026, shortly after its creation in November 2025.

With a platform risk score of 100 out of 100, defilma-io-en.pages.dev represented a high threat level during its active period. Its quick takedown likely prevented further exploitation, but the domain's initial impact underscores the importance of rapid detection and response in the cybersecurity landscape. Phishing domains like this one exploit the gap between domain registration and AV database updates, highlighting the need for proactive threat intelligence measures.