compliance-governance-center[.]pages[.]dev

Analysis of compliance-governance-center.pages.dev indicates a credential phishing domain hosted on Cloudflare infrastructure. The domain, registered on March 3, 2026, resolves to IP 172.66.44.189 (AS13335, Cloudflare, Inc., US) and uses Cloudflare nameservers (candy.ns.cloudflare.com, mcgrory.ns.cloudflare.com). The SSL certificate is issued by Google Trust Services (WE1), and the site enforces HSTS and HTTP/3 protocols. As of July 23, 2026, the domain returns an HTTP 403 status with the page title 'Suspected phishing site | Cloudflare,' suggesting Cloudflare's automated detection systems have flagged it.

Independent trust scores are uniformly low: Gridinsoft rates it 0/100, and Scamadviser assigns a score of 1/100. Sixteen of 93 security vendors on VirusTotal classify the domain as malicious, and it appears on at least one security blocklist, including PhishDestroy, which has blocked it. The domain's registration through Cloudflare, Inc., combined with its rapid detection and takedown, aligns with patterns observed in short-lived phishing campaigns. While the exact content of the site remains unanalyzed, the available evidence—including the 'credential phishing' classification in threat intelligence feeds—points to an attempt to harvest login credentials.

Defenders should treat this domain as compromised and block it at the DNS and proxy levels. Given its current offline status, no active threat is present, but historical logs should be reviewed for connections to 172.66.44.189 or the domain itself. Further investigation into the registration details and associated infrastructure may reveal additional linked domains or campaigns.