x-execute-distribution[.]pages[.]dev

The domain x-execute-distribution.pages.dev is currently classified as a generic phishing site with an elevated risk rating. The domain was created on September 02, 2020 and is hosted through Cloudflare Pages, indicating the use of Cloudflare’s static site hosting service as the registrar. Detection intelligence shows the domain appears on one security blocklist and has been explicitly blocked by the PhishDestroy filtering service.

VirusTotal analysis reports that two of ninety‑one security vendors flagged the domain, confirming that at least a minority of scanners have identified malicious behavior associated with it. No additional public intelligence such as page title, SSL certificate details, or hosting IP address is available in the supplied data, leaving the precise content and infrastructure characteristics uncertain. Consequently, defenders lack visibility into the exact phishing payload or target brand, and cannot confirm whether the site employs additional evasion techniques.

Given the confirmed presence on a blocklist, the VirusTotal detections, and the Cloudflare Pages registration, security teams should prioritize the domain for immediate blocking at DNS and web‑proxy layers. Organizations are advised to add the domain to internal blocklists, monitor for any outbound connections to its IP space, and consider sandboxing any payloads that may be retrieved from the site. Continuous monitoring of threat‑intel feeds for new indicators related to this domain is recommended to capture any future changes in its operational profile.