pro-loggin-coins-base[.]pages[.]dev

Analysis of the domain pro-loggin-coins-base.pages.dev shows a high‑risk phishing infrastructure that was taken offline as of the report date, July 24 2026. The domain was created on February 21 2026 and registered through Cloudflare, Inc., using the authoritative nameservers kolton.ns.cloudflare.com and annabel.ns.cloudflare.com. DNS resolution points to IP address 172.66.47.57, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site served an HTTP 403 response and displayed the page title "Suspected phishing site | Cloudflare," indicating that Cloudflare’s protective page was triggered, likely due to abuse reports.

A Gridinsoft trust score of 0 / 100 reinforces the malicious assessment. Security telemetry shows that 15 of 93 VirusTotal scanners flagged the domain, and Google Safe Browsing classifies it as a social‑engineering threat. The domain appears on a single external blocklist and has been explicitly blocked by the PhishDestroy service. The observed technologies include HTTP/3, HSTS, and Cloudflare’s reverse‑proxy services, while the TLS certificate is issued by Google Trust Services under the WE1 label, confirming a valid HTTPS endpoint.

The scam type is identified as brand impersonation, though the specific target brand is not disclosed in the collected data. Defenders should immediately block the domain and its associated IP address, add the nameservers to watchlists, and monitor for future registrations that reuse similar sub‑domain patterns or Cloudflare‑hosted infrastructure. Continuous re‑scanning with multi‑vendor platforms is advised to capture any resurgence, and any related indicators should be shared with threat‑intel sharing communities to improve collective detection capabilities.