en-briedge[.]pages[.]dev

This domain, en-briedge.pages.dev, is actively flagged as a generic phishing threat with elevated risk as of July 29, 2026. Infrastructure analysis reveals it is hosted on Cloudflare's network, resolving to the IP address 172.66.44.174, a non-geolocated anycast address commonly used for legitimate and malicious content alike. The domain is registered through Cloudflare, Inc., and uses Cloudflare nameservers (doug.ns.cloudflare.com and iris.ns.cloudflare.com), which aligns with its apparent use of Cloudflare Pages for hosting.

Detection data indicates the domain appears on at least one security blocklist, specifically PhishDestroy, and is flagged by 13 of 91 security vendors on VirusTotal, suggesting a consensus among multiple detection engines regarding its malicious nature. The specific content or target of the phishing campaign remains unconfirmed, as no brand, page title, or scam type is provided in the available evidence. The domain's structure, incorporating 'pages.dev', mimics Cloudflare's legitimate Pages service, which may be leveraged to lend credibility to the phishing attempt.

Defenders should treat this domain as hostile and implement blocking measures at the DNS, IP, and URL levels. Given its active status and the volume of vendor detections, monitoring for related domains using similar naming conventions or Cloudflare Pages infrastructure is recommended. No additional context regarding the phishing kit, ASN, or country-level hosting details is available in the current intelligence.