earni-fi[.]pages[.]dev

The domain earni-fi.pages.dev has been assessed as a high-risk, generic phishing site. This evaluation is based on multiple indicators of compromise and the domain's presence on security blocklists, underscoring its potential to cause significant harm to users who interact with it.

Analysis indicates that the domain earni-fi.pages.dev was registered through Cloudflare, Inc. on May 01, 2024. The domain resolves to the IP address 104.21.16.1, which is located in the United States and is part of Cloudflare's network (AS13335). While the domain is secured with an SSL certificate from Google Trust Services / WE1, it has been flagged by 3 out of 95 security vendors on VirusTotal. Additionally, the domain appears on two security blocklists, specifically PhishDestroy and ScamSniffer, further confirming its malicious nature. The current status of the domain is active, posing an ongoing threat to potential victims.

To mitigate the risk associated with this phishing site, users are advised to avoid clicking on any links or entering personal information on earni-fi.pages.dev. Network administrators should consider blocking access to this domain at the firewall or DNS level to prevent accidental visits. Security teams should monitor for any related infrastructure, such as similar subdomains or IP addresses, and take proactive measures to identify and block any additional malicious sites that may be part of the same campaign. Regularly updating security software and educating users about phishing tactics can also help reduce the likelihood of successful attacks.