sgasdadwq[.]pages[.]dev

The domain sgasdadwq.pages.dev is currently flagged as an active generic phishing infrastructure with an elevated risk rating. According to the intelligence feed, the domain was created on 26 June 2024 and is hosted on Cloudflare Pages, a free‑tier static‑site service that provides shared IP space and automatic SSL certificates. PhishDestroy has already blocked the domain, and it appears on a single security blocklist. VirusTotal analysis shows that 10 of 91 scanned security vendors have marked the domain as malicious, indicating that multiple detection engines have identified suspicious behavior.

The domain’s presence on these sources demonstrates that it is being actively used for phishing, although the specific payload, target brand, or page title have not been publicly disclosed. No additional data such as IP address, ASN, or geographic location has been released, so the full extent of the hosting environment remains uncertain. Defenders should add sgasdadwq.pages.dev to URL filtering rules and block it at the DNS, proxy, and endpoint layers.

Continuous monitoring of Cloudflare Pages subdomains and periodic re‑scanning with VirusTotal or other sandbox services is recommended to capture any changes in the site’s content or detection status. Organizations should also review authentication flows for accounts that may be targeted by generic credential‑harvesting campaigns, enforce multi‑factor authentication, and educate users about unsolicited login requests that reference unfamiliar domains. Given the elevated risk rating and the existing detections, proactive blocking and ongoing observation are prudent measures to mitigate potential compromise.