customer-feedback-center[.]pages[.]dev

This domain was registered on March 03, 2026 through Cloudflare, Inc. and resolves to IP 172.66.45.26, which belongs to AS13335 Cloudflare, Inc. in the United States. The site served an HTTP 403 response and the TLS certificate is issued by Google Trust Services under the WE1 identifier, indicating a valid public certificate. The page title returned by the server is “Suspected phishing site | Cloudflare”, and the nameservers listed are katelyn.ns.cloudflare.com and margo.ns.cloudflare.com. Security tooling shows that 15 of 93 VirusTotal scanners flagged the domain as malicious, and it appears on one external blocklist.

Reputation services rate the site extremely poorly, with Scamadviser scoring 1/100 and Gridinsoft 0/100. Detected technologies include HSTS, Cloudflare edge protection, and HTTP/3 support. The domain has been classified as a credential phishing operation and is currently listed as offline after takedown by PhishDestroy. Analysis confirms that the infrastructure is fully hosted on Cloudflare’s network, which limits direct attribution beyond the provider.

The low trust scores and multiple vendor detections strongly suggest that the site was used to harvest credentials, but the specific target brand or login portal cannot be verified because the page content has not been captured. Defenders should immediately block DNS resolution for customer-feedback-center.pages.dev and the associated IP address 172.66.45.26 at perimeter devices. Adding the domain and IP to internal blocklists, as well as to external threat feeds, will reduce exposure. Continuous monitoring of Cloudflare‑hosted IP ranges for similar patterns and periodic re‑scans of the domain are recommended in case the site reappears under a different sub‑domain or URL.