navieghrehbgherk-uukqpxgeajeweamxcfhaigpw[.]pages[.]dev

On 24 July 2026 the domain navieghrehbgherk-uukqpxgeajeweamxcfhaigpw.pages.dev was observed to host a page titled "Suspected phishing site | Cloudflare". The domain was registered on 11 March 2026 through Cloudflare, Inc. and resolves to the IP address 172.66.47.77, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site presented an HTTP 403 response and presented an SSL certificate issued by Google Trust Services under the WE1 intermediate, indicating that TLS termination is performed by Cloudflare’s edge network. Threat intelligence from PhishDestroy shows the domain is currently offline and has been placed on a single security blocklist.

Gridinsoft assigned a trust score of 0 out of 100, reflecting an extremely low reputation. VirusTotal analysis reports that 13 of 94 scanners flagged the domain, confirming that multiple vendors consider it malicious. The domain name appears on one public blocklist, and no additional public mitigations are recorded beyond the PhishDestroy block. Defenders should immediately add the domain and its resolved IP address to deny lists at perimeter and host‑based controls.

Because the domain uses Cloudflare’s DNS (jade.ns.cloudflare.com, lee.ns.cloudflare.com), any future sub‑domains under the same account may inherit the same risk profile; continuous monitoring of the authoritative nameservers is recommended. The lack of content analysis means the exact phishing payload remains unknown, but the combination of a low trust score, multiple vendor detections, and a page title explicitly indicating a suspected phishing site provides sufficient confidence to treat the host as a malicious phishing infrastructure. Ongoing observation of the IP address for potential re‑use and periodic re‑scans on VirusTotal are advised.