en-usexedos[.]pages[.]dev

Analysis indicates that the domain en-usexedos.pages.dev is actively flagged as a generic phishing site, with elevated risk status as of July 29, 2026. Infrastructure analysis reveals the domain is registered through Cloudflare, Inc., and utilizes Cloudflare nameservers (damien.ns.cloudflare.com and ivy.ns.cloudflare.com). The domain resolves to the IP address 172.66.45.9, which is part of Cloudflare's network infrastructure. At the time of assessment, the domain appears on one security blocklist and is explicitly blocked by PhishDestroy.

VirusTotal telemetry shows that 8 of 91 security vendors have detected the domain as malicious, though the specific nature of the phishing content remains unconfirmed due to the absence of detailed page analysis. The domain's registration and hosting through Cloudflare's pages.dev platform suggest low-cost, rapid deployment typical of phishing campaigns. While the exact brand or service being impersonated is not specified in available intelligence, the classification as a generic phishing threat implies it is likely designed to harvest credentials or sensitive information.

Defenders are advised to treat this domain as malicious and implement blocking measures at the network and endpoint levels. Additional monitoring of Cloudflare-hosted subdomains under pages.dev may be warranted, as this infrastructure is frequently abused for phishing operations. No further details regarding the phishing kit, targeted brand, or victim demographics are available at this time.