support-live-faqs[.]pages[.]dev

Support-live-faqs.pages.dev is flagged as a generic phishing site. The domain is delegated to Cloudflare’s name servers carl.ns.cloudflare.com and clara.ns.cloudflare.com and resolves to the Cloudflare edge address 172.66.44.230. Registration through Cloudflare, Inc. obscures registrant details, a common tactic for malicious operators seeking to hide attribution. The domain appears on a security blocklist and has been identified by PhishDestroy as an active phishing vector.

VirusTotal analysis shows that 12 of 91 scanned security vendors label the domain as malicious, providing independent corroboration of the risk. The concentration of detections across multiple vendors suggests that the site hosts or distributes phishing content, although the exact payload, page title, or SSL configuration has not been publicly disclosed. Consequently, defenders lack visibility into the specific landing page or credential‑harvesting mechanisms employed.

Given the confirmed presence on blocklists, the multi‑vendor VirusTotal detections, and the use of Cloudflare infrastructure that can mask origin servers, the domain should be treated as high‑confidence phishing. Defensive actions include adding the domain to URL filtering and DNS sinkhole policies, monitoring for outbound connections to the 172.66.44.230 address, and employing email gateway scanning to block messages that reference the domain. Continuous re‑evaluation is advised in case additional intelligence such as page content or SSL certificates becomes available.