pev3x[.]com

The domain pev3x.com was registered on August 01, 2025 through Dynadot and is currently active. It resolves to the IP address 188.114.97.3, which belongs to the United States and is advertised as part of the Cloudflare network (AS13335). The site returns an HTTP 301 redirect and presents the page title “MWBE-AOAY”. Google Safe Browsing has flagged the domain for SOCIAL_ENGINEERING, and it appears on the PhishDestroy blocklist. Infrastructure analysis shows the domain is protected by an SSL certificate issued by Google Trust Services under the WE1 designation, and HSTS is enforced. The web stack includes Vue.js and supports HTTP/3, indicating a modern front‑end. Nameservers holly.ns.cloudflare.com and watson.ns.cloudflare.com confirm the use of Cloudflare’s DNS services. Reputation metrics are poor: Gridinsoft assigns a trust score of 0 out of 100, and VirusTotal reports that 17 of 95 scanned security vendors flag the domain as malicious. The combination of a low trust score, safe‑browsing warning, and presence on a dedicated phishing blocklist aligns with the classification of a social media phishing operation. No additional intelligence such as observed payloads or compromised credentials has been published, leaving the exact phishing lure and target audience uncertain. Defenders should block pev3x.com at the network perimeter and ensure that DNS filtering solutions deny resolution of the domain. Email security gateways should be configured to flag any messages containing the URL or the page title “MWBE-AOAY”. Continuous monitoring of the associated IP address and Cloudflare DNS records is advised to detect any rapid changes or the emergence of new subdomains that could be used for credential harvesting.