presales-connects[.]pages[.]dev

The domain presales-connects.pages.dev is currently classified as a phishing site with an elevated risk rating as of the assessment date 29 July 2026. Infrastructure analysis shows the domain was created on 2 September 2020 and is hosted through Cloudflare Pages, a service that provides static site hosting on Cloudflare’s edge network. DNS resolution points to the IP address 188.114.97.3, an address associated with Cloudflare’s content‑delivery infrastructure.

The domain has been actively blocked by the PhishDestroy anti‑phishing service and appears on a single external blocklist, indicating that at least one reputable threat‑intelligence feed has flagged it for malicious use. VirusTotal scans report that 13 of 91 security vendors flag the domain as malicious, providing a consensus that the site is being used for phishing‑related activities. No additional public evidence such as Safe Browsing verdicts, Open Threat Exchange (OTX) entries, SSL certificate details, HTTP response codes, trust‑score metrics, or page‑title information is presently available.

Because the domain is tied to a known phishing mitigation service and has multiple vendor detections, defenders should treat any traffic to presales-connects.pages.dev as hostile. Recommended actions include adding the domain to network and endpoint deny lists, configuring DNS filtering to block resolution, monitoring for any related C2 infrastructure that may share the same IP, and reviewing logs for prior connections. Continuous re‑evaluation is advised, as threat actors may shift hosting or modify the payload while retaining the same domain identifier.