access-control-center[.]pages[.]dev

access-control-center.pages.dev is currently listed as offline, returning HTTP 403 responses. The site was provisioned on March 03, 2026 and is hosted behind Cloudflare’s network, resolving to IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. in the United States. DNS records show the authoritative nameservers katelyn.ns.cloudflare.com and margo.ns.cloudflare.com, indicating the domain was registered through Cloudflare, Inc. The TLS certificate is issued by Google Trust Services under the WE1 intermediate, confirming the use of a valid HTTPS endpoint despite the malicious intent. The page title presented by the server is “Suspected phishing site | Cloudflare”, and the infrastructure employs HSTS, HTTP/3, and Cloudflare’s edge services.

Threat intelligence platforms have flagged the domain as a credential phishing campaign. VirusTotal observations record 14 of 93 security vendors labeling the domain as malicious, and the site appears on one public blocklist, where it is also identified by PhishDestroy as blocked. Additional reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reinforcing the high confidence in its malicious classification. Because the domain is already taken offline, active exploitation is likely halted, yet the observed indicators suggest a broader campaign that may reuse the same hosting configuration or registration pattern.

Defenders should continue to monitor the IP address 188.114.96.3 and Cloudflare‑associated nameservers for any re‑registration of similar domains. Network‑level blocks against the IP and the domain, as well as updating URL filtering lists with the observed blocklist entry, are recommended. Analysts should also query VirusTotal and other multi‑scanner services for any future re‑appearance, and consider sharing the observed indicators with industry ISACs to improve collective detection.