11-ese[.]pages[.]dev

This domain, 11-ese.pages.dev, is currently classified as an active generic phishing site with an elevated risk rating. The authoritative DNS record resolves to the IPv4 address 188.114.97.3, which is hosted by Cloudflare as part of the Cloudflare Pages service. The domain was originally registered on September 02, 2020 through the Cloudflare Pages registrar, indicating that the attacker leveraged a free static‑site hosting platform to conceal malicious infrastructure.

Detection evidence shows that the domain appears on a single security blocklist and has been blocked by the PhishDestroy feed. VirusTotal analysis reports that fifteen out of ninety‑one scanning engines flagged the domain, confirming a consensus of malicious intent among a subset of security vendors. The limited blocklist presence suggests that broader community adoption of the indicator may still be pending, and the exact payload or targeted brand has not been publicly disclosed.

Defenders should add 188.114.97.3 and the fully qualified domain name to inbound and outbound filtering rules, monitor DNS queries for the domain, and consider sharing the indicator with additional threat intelligence platforms to increase coverage. Continuous re‑evaluation is advised, as further reconnaissance may reveal additional hosting changes, new phishing page content, or expanded victim targeting.