view-bridge-enn[.]pages[.]dev

Analysis as of July 25, 2026 indicates that the domain view-bridge-enn.pages.dev is linked to a crypto‑related scam. The domain was created on February 21, 2026 and registered through Cloudflare, Inc., using the nameservers georgia.ns.cloudflare.com and morgan.ns.cloudflare.com. Infrastructure inspection shows the domain resolves to IP 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The TLS handshake presents a certificate issued by Google Trust Services under the WE1 intermediate, confirming a valid certificate chain but offering no assurance about the site’s purpose. HTTP probing returns a 403 status code and the page title returned by Cloudflare is "Suspected phishing site | Cloudflare," indicating the site has been taken offline or blocked by the provider. Detected technologies include HSTS, Cloudflare edge services, and HTTP/3, all consistent with the hosting provider’s default stack.

Threat intelligence shows the domain appears on a single security blocklist and is explicitly blocked by PhishDestroy. The Gridinsoft trust score is 0 out of 100, reflecting a high‑risk assessment. VirusTotal analysis records four detections out of ninety‑three scanning engines, reinforcing the malicious classification. No additional public content was captured because the service is currently offline, leaving the exact payload or user‑facing content unknown.

Defenders should treat view-bridge-enn.pages.dev as a high‑confidence malicious indicator. Immediate actions include adding the domain and its IP address to network deny lists, updating DNS filtering policies, and ensuring endpoint protection solutions recognize the four VirusTotal detections. Continuous monitoring of Cloudflare‑related subdomains and any future registration attempts that reuse the same nameservers or IP range is advised, as threat actors often recycle infrastructure.