# doc-trust-eu.pages.dev — SUSPICIOUS

> doc-trust-eu.pages.dev is a generic phishing page hosted on Cloudflare's Pages service. This domain resolves to IP 172.66.44.

## Summary
PhishDestroy identifies doc-trust-eu.pages.dev as an active generic phishing domain currently under investigation for fraudulent activities. This domain mimics legitimate document verification services to deceive users into disclosing sensitive information or downloading malware. The threat level is marked as under_investigation due to limited historical data, but its active status and hosting infrastructure warrant immediate caution.  

This domain was flagged by PhishDestroy with a seed value of 64623f. VirusTotal currently reports 0 out of 95 detections, indicating it has not yet been widely recognized as malicious by security vendors. It is registered through Cloudflare, Inc., a known proxy service often abused by threat actors to obfuscate hosting origins. The domain resolves to IP address 172.66.44.217, which is part of Cloudflare's infrastructure. The SSL certificate is issued by Google Trust Services, a trusted CA, which may lend false legitimacy to the site. The domain uses Cloudflare Pages, a legitimate service repurposed for hosting phishing content, making takedown more challenging due to Cloudflare's abuse mitigation policies.  

Users should avoid interacting with doc-trust-eu.pages.dev entirely. Given its use of Cloudflare’s infrastructure and lack of detections, it may evade traditional blocklists temporarily. If accidentally accessed, do not enter any personal, financial, or credential information. Report the domain to your IT security team or via PhishDestroy’s submission portal using seed 64623f for further analysis. Consider blocking the IP 172.66.44.217 at the network level if feasible. Always verify document-sharing links through official channels and use browser safety tools like Google Safe Browsing or PhishDestroy’s real-time scanner before clicking. Cloudflare’s abuse reporting system should also be notified with full URL and timestamp to expedite review.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.217

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9d0107f1-c1c3-418d-9304-79e2237612af
- PhishDestroy: https://phishdestroy.io/domain/doc-trust-eu.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/doc-trust-eu.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/doc-trust-eu.pages.dev/
Last updated: 2026-03-23