web-home-base[.]pages[.]dev

The domain web-home-base.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and is currently listed as offline. DNS resolution points to the IP address 172.66.45.29, which is owned by Cloudflare (AS13335) and geolocated in the United States. The site presented the page title "Suspected phishing site | Cloudflare" and was flagged by the PhishDestroy blocklist, appearing on one security blocklist at the time of analysis. No SSL certificate was observed for the domain, indicating an unencrypted HTTP service that would fail modern browser security checks.

VirusTotal analysis recorded a single detection out of ninety‑three security vendors, confirming that at least one scanning engine identified malicious behavior associated with the domain. The threat is classified as a Brand Impersonation campaign, although the specific brand being spoofed is not disclosed in the available data. Evidence from the page title and blocklist entries suggests the site was used to host a generic phishing landing page, but no further content inspection was performed before the domain was taken offline.

Defenders should continue to block traffic to both the domain and its hosting IP, add the domain to internal deny lists, and monitor Cloudflare‑owned address ranges for any resurgence of similar activity. Because the domain lacks a valid TLS certificate and has already been taken down, any future re‑registration of the same name or adjacent subdomains under the pages.dev namespace should be treated with heightened scrutiny. Ongoing observation of PhishDestroy and other blocklists is recommended to capture potential re‑use of the infrastructure.