support-livegegr-web[.]pages[.]dev

The domain support-livegegr-web.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and is currently listed as offline after being taken down by the PhishDestroy takedown service. DNS resolution points to the IPv6 address 2606:4700:310c::ac42:2fb1, which belongs to AS13335 operated by Cloudflare, Inc., and the hosting location is identified as the United States. The domain is served behind Cloudflare’s edge network, with HSTS and HTTP/3 enabled, and presents an SSL certificate issued by Google Trust Services under the WE1 label, indicating a valid TLS chain.

The public page title returned by the server is "Suspected phishing site | Cloudflare" and the HTTP response code is 403, suggesting that direct access is blocked. Security reputation services provide extremely low trust scores: Gridinsoft rates the domain at 0 out of 100 and Scamadviser at 1 out of 100. VirusTotal analysis shows that 14 of 93 scanned security vendors flagged the domain, reinforcing the malicious assessment.

The domain appears on a single external blocklist and is explicitly categorized as a Tech Support Scam, aligning with the observed infrastructure and reputation signals. Defenders should continue to block the IPv6 address 2606:4700:310c::ac42:2fb1 at network perimeter devices, ensure that any outbound connections to Cloudflare edge nodes associated with this address are inspected, and update URL filtering policies to include the full domain. Monitoring for re‑registration or new subdomains that resolve to the same Cloudflare IP range is advised, as the threat actor may attempt to reactivate the infrastructure under a different label.