data-center-impersonation-privacy[.]pages[.]dev

Analysis of the domain data-center-impersonation-privacy.pages.dev indicates it is a credential phishing site with elevated risk, now offline. The domain was registered on February 21, 2026, through Cloudflare, Inc., and resolved to the IP address 188.114.97.3, hosted in Canada under Cloudflare's infrastructure. Nameservers tony.ns.cloudflare.com and venus.ns.cloudflare.com confirm Cloudflare as the DNS provider. The page title, matching the domain name, provides no additional brand-specific context, and no known phishing kit or targeted brand is identified in the available data.

Trust scores from Gridinsoft and Scamadviser both rate the domain at 0/100 and 1/100, respectively, reflecting minimal confidence. Sixteen of 93 security vendors on VirusTotal flagged the domain as malicious, and it appears on at least one security blocklist, including PhishDestroy, which has blocked it. The domain's HTTP status returned a 403 Forbidden response at the time of assessment, and it is currently offline. Technologies detected include HSTS, Cloudflare, and HTTP/3, typical of modern web infrastructure but not inherently indicative of malicious activity.

Defenders should treat this domain as a confirmed credential phishing threat, particularly given its Cloudflare Pages hosting, which is frequently abused for rapid deployment of phishing sites. While the exact content and targeted brand remain unconfirmed, the combination of low trust scores, blocklist presence, and vendor detections provides sufficient evidence to classify this as a high-risk domain. Organizations should ensure endpoint protection and email filtering systems are updated to block this domain and monitor for related infrastructure, such as similarly named Cloudflare Pages subdomains or reused IPs.