faqs-en-livelzr[.]pages[.]dev

Analysis of the domain faqs-en-livelzr.pages.dev shows a recent registration (27 March 2026) through Cloudflare, Inc., with authoritative nameservers alex.ns.cloudflare.com and olga.ns.cloudflare.com. DNS resolution points to the IPv4 address 188.114.97.3, a host frequently utilized by short‑lived malicious infrastructure. The domain has been added to the PhishDestroy blocklist and appears on a single public security blocklist, indicating that at least one external mitigation service has identified it as abusive.

VirusTotal reports that the domain was scanned by 91 anti‑malware engines; none of the engines raised a detection, but the absence of detections does not constitute a safety assurance and is consistent with the low‑visibility, fast‑turnover tactics often employed by phishing operators. No publicly available data on SSL/TLS configuration, HTTP response codes, page title, or Safe Browsing status was supplied, leaving those vectors unverified. The lack of additional context such as a targeted brand, page content, or observed credential‑stealing pages confines the current assessment to the observable infrastructure indicators.

Defenders should proactively block the domain and its resolved IP address at network perimeters, add the host to reputation‑based filtering lists, and monitor for any emerging activity tied to 188.114.97.3. Continuous re‑scanning with sandbox and threat‑intel platforms is advised, as the short lifespan of the domain may obscure later payload deployment or credential‑harvesting pages.