en-web3-exeds-us[.]pages[.]dev

Analysis of en-web3-exeds-us.pages.dev indicates active infrastructure supporting a generic phishing operation with an elevated risk rating. The domain resolves to the IP address 172.66.44.128 and is hosted behind Cloudflare, Inc., as evidenced by the registrar information and the authoritative name servers clark.ns.cloudflare.com and evangeline.ns.cloudflare.com. VirusTotal scans have returned 8 positive detections out of 91 security vendors, confirming that multiple independent tools recognize malicious behavior.

The domain is currently listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the view that it is being used for phishing attempts. No public records of SSL certificate details, HTTP response codes, or page title metadata are available, so the exact content delivered to victims remains unknown. Defenders should continue to block the domain at network perimeters, update intrusion‑prevention signatures, and monitor outbound connections to the associated IP address.

Additional scrutiny of traffic to Cloudflare‑managed name servers may reveal related campaigns, and any observed login credential submission should be treated as compromised. Organizations are advised to educate users about the risk of unsolicited links that resolve to this domain and to enforce multi‑factor authentication to mitigate potential credential theft.