customer-support-system-contact-case-hub[.]pages[.]dev

The domain customer-support-system-contact-case-hub.pages.dev was registered through Cloudflare, Inc. on March 03, 2026 and resolves to the IP address 157.240.0.35, which is owned by Cloudflare (AS13335) and geolocated in the United States. The site presented a page title of "Facebook – log in or sign up," indicating a direct attempt to impersonate Facebook. Google Safe Browsing has flagged the domain for social engineering, and 14 of 93 security vendors on VirusTotal have reported it as malicious, reinforcing the suspicion of brand‑impersonation activity. HTTP probing returned a 403 status code, suggesting that the server is configured to reject unauthorized requests, yet the domain was still reachable by security tools.

The site employed standard Cloudflare services, including HSTS and HTTP/3, and presented an SSL certificate issued by Google Trust Services under the identifier WE1, which is typical for legitimate Cloudflare‑protected sites but does not mitigate the malicious intent. Nameserver records point to bowen.ns.cloudflare.com and meiling.ns.cloudflare.com, both consistent with the registrar’s infrastructure. Trust metrics are extremely low: Gridinsoft assigns a score of 0 / 100, Scamadviser a trust score of 1 / 100, and the domain appears on at least one known security blocklist.

PhishDestroy has confirmed the domain as offline, and current monitoring indicates it remains taken down. Defenders should immediately add the full host name to URL filtering and DNS blocklists, enforce outbound traffic controls to prevent accidental connections, and monitor for any similar Cloudflare‑hosted domains that resolve to the same IP range with Facebook‑related page titles. Continuous re‑evaluation of the domain’s status is advised, as the underlying infrastructure could be repurposed for future campaigns.