craxsratdownload[.]pages[.]dev

This domain, craxsratdownload.pages.dev, is flagged as a high-risk brand impersonation targeting Cloudflare. Registered through Cloudflare, Inc., the domain was created on February 21, 2026. The site resolves to the IP address 172.66.46.212, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The page title found is 'Suspected phishing site | Cloudflare,' which suggests the intent to deceive visitors into believing they are interacting with a legitimate Cloudflare service.

The SSL certificate is issued by Google Trust Services / WE1, adding an additional layer of trust that may be exploited to gain user confidence. The domain has an HTTP status of 200, indicating that it is currently accessible. The Gridinsoft trust score for this domain is 0/100, reflecting a highly untrusted status. Analysis indicates that 5 out of 93 security vendors on VirusTotal flag this domain as malicious, and it appears on one security blocklist, specifically PhishDestroy.

The technologies detected on the site include HSTS, Cloudflare, and HTTP/3, which are commonly used to enhance website security but may also be employed to mask malicious activities. While the exact content of the site has not been analyzed, the page title and the nature of the threat suggest that it is designed to impersonate Cloudflare, potentially to steal credentials or other sensitive information. Defenders should block this domain at the network level and warn users about the risk of visiting suspected phishing sites impersonating Cloudflare. Regular monitoring and updates to security policies are recommended to mitigate the threat effectively.