support-en-sea[.]pages[.]dev

Analysis of support-en-sea.pages.dev shows that the domain was created on 21 February 2026 and registered through Cloudflare, Inc. The domain resolves to the IP address 188.114.96.3, which is owned by Cloudflare (AS13335) and located in the United States. DNS queries return the Cloudflare‑provided authoritative nameservers courtney.ns.cloudflare.com and khalid.ns.cloudflare.com. The site presents the page title “Suspected phishing site | Cloudflare” and responds with an HTTP 403 status code, indicating that access to the underlying content is intentionally denied or blocked. TLS termination is performed by Cloudflare, using a certificate issued by Google Trust Services under the WE1 root, confirming that HTTPS connections are secured by a legitimate certificate chain.

Reputation services reflect extreme distrust: Scamadviser assigns a score of 1 out of 100, Gridinsoft a score of 0 out of 100, and the domain is listed on a single security blocklist. The phishing‑specific service PhishDestroy has already blocked the domain. Google Safe Browsing flags the domain for social‑engineering, aligning with the indicated scam type of a tech‑support scam. VirusTotal scans show 14 detections out of 93 scanning engines, reinforcing the malicious classification.

Observed infrastructure includes HSTS enforcement, HTTP/3 support, and Cloudflare edge technology, all typical of domains that leverage Cloudflare’s performance and protection services. No additional page content has been captured, so the exact phishing landing page, credential‑capture mechanisms, or victim‑interaction flow remain unknown.

Given the combination of a recent registration, low trust scores, multi‑vendor detections, and explicit blocklist entries, defenders should treat the domain as high‑risk.