gammojafo-zoibroila-f2d176[.]pages[.]dev

Analysis of the domain gammojafo-zoibroila-f2d176.pages.dev shows that it was registered on 28 February 2026 through Cloudflare, Inc. The domain resolves to the Cloudflare edge address 172.66.47.57, which is announced by AS13335 and geolocated to the United States. The hosting infrastructure is protected by Cloudflare and presents an SSL certificate issued by Google Trust Services under the WE1 designation, indicating a valid TLS chain. HTTP probing returns a 404 status code and the page title, when retrieved, reports “Meta Support Center”, a generic label that does not correspond to an official Meta property. Technical fingerprints include enforced HSTS, Cloudflare CDN services, and support for HTTP/3, all typical of Cloudflare‑hosted sites. VirusTotal has recorded 12 detections out of 93 scanners, suggesting that multiple security vendors have flagged the domain as malicious.

The domain also appears on a single public blocklist and is listed as blocked by the PhishDestroy service, reinforcing the suspicion of phishing activity. No additional intelligence such as OTX references or Safe Browsing alerts is present in the supplied data. The combination of a recent registration date, use of a Cloudflare‑provided sub‑domain, a mismatched page title, and multiple vendor detections aligns with known patterns for generic phishing campaigns that leverage trusted hosting to evade reputation checks. However, the site is currently offline, and no content beyond the HTTP status and title has been captured, leaving the exact phishing vector and targeted brand undefined.

Defenders should continue to block the domain at perimeter controls and update any URL filtering lists that reference it. Monitoring of the associated IP address 172.66.47.57 for new hostnames is advisable, as Cloudflare customers frequently share the same edge nodes.