support--coindge-com[.]pages[.]dev

The domain support--coindge-com.pages.dev was registered on October 29, 2025 through Cloudflare, Inc. and is hosted on Cloudflare’s network (ASN 13335) with the address 172.66.44.96, located in the United States. The site currently returns an HTTP 403 status and the page title presented by the server is "Suspected phishing site | Cloudflare," indicating that Cloudflare’s protective page has been triggered. The domain resolves to Cloudflare’s edge infrastructure and uses a Google Trust Services / WE1 SSL certificate, with HSTS, HTTP/3, and other Cloudflare‑provided technologies observed. Nameserver delegation points to carter.ns.cloudflare.com and meera.ns.cloudflare.com, confirming the use of Cloudflare’s DNS services.

Security telemetry shows that 15 out of 95 VirusTotal scanners have flagged the domain as malicious, and it appears on a single external blocklist. The domain is also listed by PhishDestroy as blocked, and Gridinsoft assigns it a trust score of 0 out of 100, reinforcing the malicious assessment. The threat classification in the intelligence set is a Tech Support Scam, though no specific victim brand is identified in the available data. Because the site is presently offline, active probing is limited, but the combination of a low trust score, multiple vendor detections, and the presence of a Cloudflare warning page suggests the domain was used to lure victims into a tech‑support fraud narrative.

Defenders should continue to block the domain at perimeter firewalls and DNS filtering solutions, monitor for any resurgence of activity, and correlate any inbound connections from the IP 172.66.44.96 with internal logs. Incident responders should also advise users to avoid unsolicited tech‑support calls and to verify any support requests through official channels. Ongoing threat‑intelligence feeds should be consulted for updates, and any detections of the domain in endpoint or proxy logs should be treated as high‑confidence indicators of compromise.