termsaccounnt-ass-o1211p-firegatewayx[.]pages[.]dev

The domain termsaccounnt-ass-o1211p-firegatewayx.pages.dev was registered on February 21 2026 through Cloudflare, Inc. and is currently taken offline, returning an HTTP 403 status code. DNS resolution points to the Cloudflare edge address 188.114.96.3, which belongs to AS13335 in the United States. The site presented a TLS certificate issued by Google Trust Services under the WE1 label, indicating that HTTPS was enabled and HSTS was enforced. Cloudflare services, including HTTP/3, are observed in the technology stack.

Security telemetry shows that 15 of 93 VirusTotal scanners flagged the domain as malicious, and it appears on a single external blocklist. The page title returned by the server is "Suspected phishing site | Cloudflare," corroborating the classification as a credential‑phishing landing page. Additional threat intelligence marks the domain as blocked by PhishDestroy and assigns a Gridinsoft trust score of 0 out of 100, reinforcing the elevated risk assessment.

Nameservers listed are maxim.ns.cloudflare.com and abby.ns.cloudflare.com. Defenders should treat any traffic to this domain as hostile, block the FQDN at perimeter and DNS filtering layers, and monitor for related indicators such as the IP 188.114.96.3 and the associated Cloudflare nameserver set. Because the site is offline, direct content analysis is unavailable; however, the convergence of certificate data, vendor detections, blocklist inclusion, and the explicit "Credential Phishing" tag provides sufficient evidence to justify proactive containment and continued observation of any future re‑hosting attempts.