customer-support-system-case-solution-center[.]pages[.]dev

The domain customer-support-system-case-solution-center.pages.dev was created on March 03, 2026 and is hosted behind Cloudflare infrastructure (ASN 13335). DNS resolution points to IP 157.240.0.35, which is located in the United States and belongs to Cloudflare, Inc. The site presented a page title of "Facebook - Connexion ou inscription," directly referencing the Facebook brand, confirming a brand‑impersonation tactic. SSL termination is performed by Google Trust Services under the WE1 certificate, indicating a legitimate certificate chain but does not mitigate the malicious intent. HTTP responses returned a 403 status, and the site employed HSTS, Cloudflare, and HTTP/3 technologies, typical of legitimate services but also used by threat actors to appear trustworthy.

Reputation services assign extremely low trust scores: Scamadviser 1/100 and Gridinsoft 0/100, reinforcing the malicious nature. Google Safe Browsing flags the URL for social engineering, and 16 of 93 VirusTotal scanners flagged it, showing broad detection across security vendors. The domain appears on at least one public blocklist and is actively blocked by PhishDestroy. Current operational status is offline, yet historical activity suggests it was leveraged to lure victims into a Facebook‑related login flow.

Defenders should immediately add the domain and its resolving IP to outbound and inbound blocklists, monitor for any residual traffic to the Cloudflare IP range, and verify that internal DNS caches are cleared. Continuous re‑scanning is advisable, as the site may be re‑hosted or resurrected under a different subdomain. Organizations should also review authentication logs for any attempted use of Facebook credentials and enforce multi‑factor authentication where possible.