website-32s[.]pages[.]dev

website-32s.pages.dev is a newly registered domain (created 1 April 2026) that is currently hosting a generic phishing page titled “北科大區塊鏈研究社”. The site resolves to the Cloudflare‑owned address 188.114.96.3 and uses Cloudflare’s DNS service (harlee.ns.cloudflare.com, randall.ns.cloudflare.com). TLS termination is provided by a Google Trust Services certificate issued for the WE1 authority, and the server advertises HSTS and HTTP/3, indicating a modern, CDN‑accelerated deployment. HTTP requests return a 200 status code, and the page has been flagged by a single security blocklist and by PhishDestroy. Automated scoring shows a Gridinsoft trust score of 0 / 100 and VirusTotal reports a single positive detection out of 95 scanners, reinforcing the malicious classification. The presence of a legitimate SSL certificate and CDN does not mitigate the risk, as they are commonly abused to lend credibility to phishing sites. Publicly available intelligence does not disclose the underlying phishing kit, credential‑harvesting form, or the specific victim profile beyond the Chinese‑language title suggesting a focus on blockchain research groups. No additional hosting infrastructure, command‑and‑control endpoints, or malware payloads have been observed, leaving the exact attack vector and data exfiltration path uncertain. Defenders should immediately add website-32s.pages.dev to URL filtering and DNS blocklists, and enforce outbound traffic controls to prevent connections to the 188.114.96.3 address. Email gateways should be tuned to detect references to the page title or similar Chinese characters associated with blockchain research. Continuous monitoring of Cloudflare‑associated IP ranges for new domains with comparable characteristics is advised, and any captured phishing credentials should be reported to relevant incident response teams for further attribution.