app-harambetoken-ai[.]pages[.]dev

The domain app-harambetoken-ai.pages.dev was created on July 24, 2024 and is provisioned through Cloudflare Pages. It currently appears on three public security blocklists and is explicitly blocked by the PhishDestroy, MetaMask, and SEAL blocklist providers. VirusTotal analysis shows that 11 of 91 scanned security vendors have flagged the domain as malicious, reinforcing its classification as a phishing infrastructure.

The threat is listed as generic phishing with a high risk rating and remains active as of the report date, July 29, 2026. Observable data does not include a publicly disclosed IP address, SSL certificate details, HTTP response codes, or page title, limiting deeper technical profiling of the hosting environment. The use of Cloudflare Pages suggests the site benefits from the provider’s shared, anonymous edge network, which can obscure the true origin of the malicious content.

Defenders should prioritize blocking DNS resolution for this fully qualified domain name across enterprise firewalls and endpoint protection solutions. Continuous monitoring of DNS query logs for related subdomains is advised, as attackers often leverage additional Cloudflare‑hosted assets. Organizations should also incorporate the domain into threat‑intel feeds and update URL filtering policies to reflect its presence on multiple blocklists.