notnot[.]pages[.]dev

The domain notnot.pages.dev is presently active and has been classified as a generic phishing site. Infrastructure analysis shows that the domain is registered through Cloudflare, Inc. and is served by Cloudflare’s DNS infrastructure, using the authoritative name servers jade.ns.cloudflare.com and major.ns.cloudflare.com. DNS resolution points to the IP address 188.114.97.3, which is part of Cloudflare’s edge network and does not disclose a direct hosting provider beyond the CDN service.

The domain has been added to two security blocklists and is actively blocked by the PhishDestroy and ScamSniffer filtering services, indicating that multiple threat‑intelligence feeds have observed malicious activity associated with the host. VirusTotal reports that the domain was examined by 91 antivirus and URL‑reputation vendors; at the time of scanning no vendor flagged the domain as malicious, though the absence of detections does not constitute a safety guarantee. No additional data such as SSL certificate details, HTTP response codes, page titles, or brand references are available from the current intelligence set, leaving the exact content and lure tactics of the site unverified.

Given the confirmed phishing designation, the presence on blocklists, and the Cloudflare‑based hosting that can obscure backend infrastructure, defenders should continue to block the domain at perimeter filters, monitor DNS queries for the associated IP, and consider adding the host to local deny lists. Ongoing observation is recommended to capture any changes in detection status or the emergence of new indicator data.