autonity-lend[.]pages[.]dev

Analysis indicates that the domain autonity-lend.pages.dev was registered on 2026-04-11 and is currently active. The site returns HTTP 200 responses and presents the page title “AutonityLend - Institutional DeFi Lending”. The domain resolves to IP 172.66.44.119, an address attributed to Cloudflare, Inc. in Canada, and appears to be hosted via Cloudflare Pages. The TLS certificate is issued by Google Trust Services under the WE1 label. Reputation data shows a Gridinsoft trust score of 0/100 and inclusion on a single security blocklist. The domain is also listed as blocked by PhishDestroy. VirusTotal records indicate the domain was scanned by 94 vendors with no detections, but the lack of detections does not constitute a safety guarantee. The combination of a newly created domain, low trust score, blocklist presence, and phishing‑related blocklisting suggests the infrastructure is being used for a generic phishing campaign targeting users of decentralized finance services. No additional technical artifacts such as malicious payloads or command‑and‑control endpoints have been observed so far. Defenders should monitor DNS queries for this domain, enforce URL filtering, and consider adding it to deny lists on perimeter security devices. Users should be warned that any credential submission to the site may result in credential compromise. Further investigation is required to determine the full scope of the phishing operation and any associated victim data exfiltration.