customer-support-system-feedback-request-center[.]pages[.]dev

The domain customer-support-system-feedback-request-center.pages.dev was registered on March 03, 2026 and is currently taken offline, returning HTTP 403 responses. It is hosted on Cloudflare infrastructure (nameservers asa.ns.cloudflare.com and emerson.ns.cloudflare.com) and resolves to IP address 157.240.253.35, which is associated with AS13335 Cloudflare, Inc. in the United States. The site presents a TLS certificate issued by Google Trust Services under the WE1 root, indicating a valid HTTPS endpoint, and employs modern web technologies including HSTS and HTTP/3. The page title captured from the site reads "Facebook - Meld je aan of registreer je," directly referencing the Facebook brand, and the domain is classified as a brand impersonation threat targeting Facebook.

Multiple security controls have already acted on the domain: PhishDestroy blocked access, Google Safe Browsing flags it for social engineering, Gridinsoft assigns a trust score of 0 / 100, Scamadviser a score of 1 / 100, and the domain appears on one security blocklist. VirusTotal analysis shows 13 of 93 scanning engines flag the domain, reinforcing its malicious nature. While the site is offline, its infrastructure—shared Cloudflare IP space and a legitimate‑looking SSL certificate—could be leveraged for future campaigns, making the threat level high.

Defenders should add the fully qualified domain name to URL filtering and sink‑hole lists, block the associated IP address where feasible, and monitor for any resurgence of activity originating from the same Cloudflare edge nodes. Continuous re‑checking of the domain’s status with threat intel feeds is advised, as well as updating endpoint protection signatures to include the observed detection patterns. Organizations should also educate users about unsolicited Facebook‑related login prompts, emphasizing that legitimate Facebook communications do not originate from pages.dev subdomains.