cheelee[.]pages[.]dev

The domain cheelee.pages.dev is currently active and flagged as a high-risk credential harvesting phishing site. Analysis indicates the page impersonates the legitimate digital glasses marketplace Cheelee, likely targeting users to harvest login credentials or payment information. The domain remains operational and exhibits characteristics consistent with phishing infrastructure. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on April 24, 2026, and resolves to the IP address 188.114.96.3, located in Canada and associated with Cloudflare’s network. The SSL certificate is issued by Google Trust Services (WE1), a common feature in phishing campaigns leveraging legitimate certificate authorities. Detection metrics show the domain is flagged by 2 of 95 security vendors on VirusTotal and appears on three distinct security blocklists, including PhishDestroy, ScamSniffer, and Enkrypt. The page title, 'Digital Glasses Marketplace | Cheelee,' further supports the impersonation of the legitimate Cheelee brand. As of this report, cheelee.pages.dev remains active and poses a continued threat to users. Organizations and security teams are advised to block the domain at the DNS or network level and update endpoint protection rules to include this indicator. Users who may have interacted with the domain should reset credentials immediately and monitor accounts for unauthorized activity. Further monitoring of Cloudflare-hosted subdomains with similar naming patterns is recommended to identify related threats.