dfoihjjikolfhd[.]pages[.]dev

Analysis indicates that dfoihjjikolfhd.pages.dev is currently active and classified as a generic_phishing infrastructure. The domain was registered on March 28 2026 through Cloudflare, Inc. and resolves to the Cloudflare‑owned address 172.66.47.25, which is geolocated to Canada. The TLS certificate is issued by Google Trust Services under the WE1 authority, and the site presents HSTS and HTTP/3 support, confirming modern CDN configuration. The page title returned by the web server is “Git Foundation,” but the content has not been publicly examined, so the exact phishing lure remains unknown. The domain appears on one security blocklist and is actively blocked by PhishDestroy. Gridinsoft assigns a trust score of 0 / 100, and the nameservers listed are jillian.ns.cloudflare.com and viddy.ns.cloudflare.com. VirusTotal has recorded scans from 94 vendors with no detections, which does not constitute evidence of safety. Given the active status, the generic phishing label, and the presence on a blocklist, defenders should add the domain and its resolving IP to deny‑list rules, monitor for any DNS or TLS fingerprint changes, and continue to observe related Cloudflare name‑server activity for potential re‑use. Additional investigation of the page content is recommended to determine the targeted brand or credential‑capture technique.