customer-support-system-claim-help-center[.]pages[.]dev

Analysis of the domain customer-support-system-claim-help-center.pages.dev indicates a high-risk brand impersonation threat targeting Facebook users, classified as a crypto scam. The domain was registered on March 3, 2026, through Cloudflare, Inc., and is currently offline with an HTTP 403 status. Infrastructure analysis reveals it resolves to IP 157.240.0.35, hosted on Cloudflare's network (AS13335) in the US, with nameservers ed.ns.cloudflare.com and lucy.ns.cloudflare.com. The SSL certificate is issued by Google Trust Services (WE1), and technologies detected include HSTS and HTTP/3, consistent with Cloudflare-hosted properties. The page title, 'Facebook - Meld je aan of registreer je,' directly references Facebook's login or registration process in Dutch, suggesting an attempt to deceive users in Dutch-speaking regions.

Google Safe Browsing flags the domain for social engineering, and it appears on at least one security blocklist. Trust scores from Scamadviser and Gridinsoft are both 1/100 and 0/100, respectively, indicating extreme risk. Twelve of 93 security vendors on VirusTotal flagged the domain as malicious, though the specific detection rules or signatures are not detailed in available intelligence. While the domain is currently offline and blocked by PhishDestroy, the infrastructure remains intact, and similar domains may re-emerge.

Defenders should monitor for related Cloudflare-hosted pages.dev subdomains with Facebook-themed titles or crypto-scam indicators. The use of Cloudflare's registrar and hosting services complicates takedown efforts, as the infrastructure is shared with legitimate users. No evidence links this domain to a specific phishing kit or actor, and the exact content of the scam page is not analysed. Organizations should treat this domain as high-risk and prioritize blocking or monitoring based on the available indicators.