advertisers-client-support-claim-violation[.]pages[.]dev

The domain advertisers-client-support-claim-violation.pages.dev was registered on February 21, 2026 and is currently taken offline. Infrastructure analysis shows it resolves to 172.66.44.169, an address owned by AS13335 Cloudflare, Inc. in the United States. The domain uses Cloudflare’s DNS service, with authoritative nameservers peyton.ns.cloudflare.com and poppy.ns.cloudflare.com, and presents a Google Trust Services / WE1 SSL certificate, indicating TLS termination at Cloudflare. HTTP interrogation returned a 403 status code and the page title displayed by the server is "Suspected phishing site | Cloudflare," suggesting that Cloudflare’s automated protection mechanisms have already flagged the site as a phishing or malicious resource.

Detected technologies include HTTP/3 and HSTS, both typical of Cloudflare‑protected sites. Reputation services assign extremely low trust scores: Gridinsoft rates the domain 0/100, Scamadviser 1/100, and it appears on at least one security blocklist. PhishDestroy has actively blocked the domain, and VirusTotal records 15 of 93 antivirus engines labeling the host as malicious, reinforcing the elevated‑risk assessment. The listed scam type is a crypto scam, specifically a crypto drainer, which aligns with the observed reputation and blocklist activity.

While the exact payload or phishing landing page has not been captured, the combination of a newly created domain, Cloudflare‑hosted infrastructure, low trust scores, and multiple vendor detections provides sufficient confidence to classify the site as a high‑confidence crypto‑drainer indicator. Defenders should continue to block the domain at network perimeters, update URL filtering lists, and monitor related Cloudflare‑owned IP ranges for similar rapid‑deployment domains.