log-x-edus-web3[.]pages[.]dev

Analysis of the domain log-x-edus-web3.pages.dev indicates it was a confirmed phishing site operating as an investment scam. The domain, registered on February 21, 2026, through Cloudflare, Inc., resolved to the IP address 188.114.96.3 (AS13335, Cloudflare, Inc., US). The SSL certificate was issued by Google Trust Services (WE1), and the domain was hosted on Cloudflare Pages infrastructure, utilizing nameservers razvan.ns.cloudflare.com and hadlee.ns.cloudflare.com. Technologies detected include HSTS, Cloudflare, and HTTP/3.

The domain was flagged by 10 of 93 security vendors on VirusTotal and appeared on at least one security blocklist. PhishDestroy classified it as blocked, and Scamadviser assigned a trust score of 1/100, while Gridinsoft rated it 0/100. The page title, 'Suspected phishing site | Cloudflare,' aligns with its classification as a phishing domain. The HTTP status returned was 403, and as of July 24, 2026, the domain has been taken offline.

The scam type was explicitly identified as an investment scam, though the exact content or targeted brands remain unconfirmed due to lack of further analysis. Defenders should treat this domain as malicious, block it at the network level, and monitor for related infrastructure, particularly any reuse of the IP 188.114.96.3 or associated Cloudflare Pages subdomains. No evidence suggests persistence beyond its current offline status, but historical logs should be reviewed for prior connections.