advertisers-client-support-messaging-service[.]pages[.]dev

The domain advertisers-client-support-messaging-service.pages.dev was created on 21 February 2026 and is hosted on Cloudflare’s network (ASN 13335). DNS resolution points to 172.66.45.29, an IP address located in the United States and owned by Cloudflare, Inc. The site presents a Cloudflare‑issued SSL certificate signed by Google Trust Services (WE1) and enforces HSTS, while also supporting HTTP/3. HTTP requests receive a 403 response, indicating that the content is not publicly accessible. The page title returned by the server reads “Suspected phishing site | Cloudflare,” confirming that the host has been flagged as a phishing destination.

The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service. Reputation scoring services assign extremely low trust levels: Gridinsoft reports a score of 0 / 100 and Scamadviser a score of 1 / 100. VirusTotal analysis shows that 14 of 93 scanning engines flag the domain, reinforcing the malicious assessment. The declared scam type is Banking Phishing, suggesting attempts to harvest credentials for financial accounts.

Uncertainty remains regarding the exact payload or credential‑stealing page, as the site is currently offline and no content has been captured. Defenders should continue to block the domain at perimeter firewalls, DNS resolvers, and proxy layers, monitor for any re‑registration or resurrection of the host, and add the IP address 172.66.45.29 to threat‑intel feeds. Continuous re‑scanning of the domain after any change in status is advised to detect potential re‑activation.