range-gui-prod[.]pages[.]dev

Analysis of range-gui-prod.pages.dev shows a newly registered domain created on March 27, 2026 and hosted on Cloudflare Pages. The domain resolves to IP address 172.66.47.128, which belongs to Cloudflare, Inc. in Canada. TLS is provided by Google Trust Services under the WE1 certificate, and the site returns HTTP 200 with the page title "Range | The blockchain security and intelligence platform." The domain has a Gridinsoft trust score of 0 / 100 and is listed on a single security blocklist. PhishDestroy has already blocked the domain, and VirusTotal reports that 94 scanners have examined the site without generating detections, though this does not constitute a safety guarantee. The threat is classified as generic phishing and remains under investigation with an active status. At present, the exact phishing payload or credential‑harvesting mechanism has not been disclosed, and no visual content of the page has been examined. Defenders should continue to monitor DNS and HTTP activity for this host, enforce URL filtering to block the domain, and consider adding the IP address to network‑level deny lists. Ongoing collection of payload samples and network telemetry is recommended to confirm the malicious intent and to update detection rules as additional indicators emerge.