enderminediscord[.]pages[.]dev

The domain enderminediscord.pages.dev was registered on March 23, 2026 and is hosted on Cloudflare Pages, resolving to the IP address 172.66.44.193 located in Canada and served through Cloudflare, Inc. The site presents a valid SSL certificate issued by Google Trust Services (WE1) and returns HTTP status 200. The page title observed is "Weiterleitung zu Space Studio," which does not directly reference the targeted brand, but the intelligence flags the domain as a Discord brand‑impersonation used for social media phishing. The domain is listed on a single security blocklist (PhishDestroy) and has a Gridinsoft trust score of 0/100, indicating a high likelihood of malicious activity. VirusTotal analysis shows that 1 of 94 security vendors flagged the domain, reinforcing the suspicion. The risk level is classified as high and the infrastructure remains active as of the report date. While the exact phishing content has not been publicly disclosed, the combination of brand targeting, low trust score, blocklist presence, and vendor detection suggests a credential‑harvesting campaign aimed at Discord users. Defenders should block the domain at network and endpoint layers, monitor DNS queries for the hostname, and consider adding the IP address to reputation filters. Continuous re‑evaluation is advised should additional indicators emerge.