# nx0b6we.pages.dev — SUSPICIOUS

> nx0b6we.pages.dev hosts a generic phishing page detected via 0/95 VirusTotal scans; avoid sharing credentials. Cloudflare-hosted, Google SSL-certified domain.

## Summary
PhishDestroy identifies nx0b6we.pages.dev as a live phishing endpoint currently under investigation. This domain employs Cloudflare’s infrastructure (registered through Cloudflare, Inc.) and leverages a Google Trust Services SSL certificate to appear legitimate. Based on current telemetry, the page is hosted at IP 172.66.44.174 and has not yet been flagged by VirusTotal, showing 0 detections out of 95 scans. The lack of detection does not guarantee safety; this site remains a credible threat vector for credential harvesting and should be treated as hostile until further analysis concludes.  This domain was flagged by PhishDestroy’s automated pipeline using seed c2e19d, which correlates it to a known template frequently abused in generic phishing campaigns. The domain’s recent creation—paired with its deployment on Cloudflare Pages and the use of a Google-issued certificate—is a common tactic to evade traditional email gateways and browser-based warnings. While the SSL certificate provides a veneer of legitimacy, it does not validate the site’s intent. The combination of low detection rates and active hosting suggests this infrastructure is either newly operational or deliberately low-signature to avoid early discovery.  If you have visited nx0b6we.pages.dev, avoid entering any personal or corporate credentials. Immediately clear browser cache and cookies related to the site, and consider running a malware scan on the device used. Report the domain to your security team or via PhishDestroy’s submission portal to aid ongoing takedown efforts. Avoid clicking links from unsolicited emails or messages referencing this domain, as it may be part of a broader lure campaign. Organizations should block nx0b6we.pages.dev at DNS and firewall levels based on this advisory.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.174

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/nx0b6we.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/nx0b6we.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/nx0b6we.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/nx0b6we.pages.dev/
Last updated: 2026-04-03