# eth-nexus.pages.dev — MALICIOUS

> Caution: eth-nexus.pages.dev flagged for social engineering. Avoid sharing personal info on this suspicious domain.

## Summary
PhishDestroy identifies eth-nexus.pages.dev as a domain under active investigation for generic phishing activities, currently rated with an uncertain risk level. The domain exhibits behaviors typical of social engineering scams, aiming to deceive users into divulging sensitive information.

This domain is registered via Cloudflare, Inc., and is flagged by Google Safe Browsing for social engineering, indicating potential phishing attempts. Although VirusTotal scans show zero detections from security vendors, the domain resolves to an IP address known to host suspicious content. The combination of these factors suggests a high likelihood of phishing, warranting caution.

Users are advised to avoid interacting with eth-nexus.pages.dev and refrain from entering any personal or financial information. PhishDestroy continues to monitor this domain's activity closely. Immediate blocking and user awareness are recommended until the investigation clarifies the full extent of the threat.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Cleud - Webflow E-commerce website template

## Domain Intelligence
- Registered: 2026-03-10 15:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.44.89
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: kanye.ns.cloudflare.com priscilla.ns.cloudflare.com
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 12 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "CyRadar", "ESET", "Fortinet", "G-Data", "Google Safebrowsing", "Lionic", "Phishing Database", "Sophos", "URLQuery", "VIPRE"]
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd80d-3a17-706f-a384-96c849b1c310.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/812e2a5b-cdba-48ab-b2e3-60b1295e216b
- PhishDestroy: https://phishdestroy.io/domain/eth-nexus.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/eth-nexus.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/eth-nexus.pages.dev/
Last updated: 2026-03-19