m-kucion[.]pages[.]dev

Analysis indicates that the domain m-kucion.pages.dev was registered on 21 February 2026 and is hosted behind Cloudflare’s edge network (AS13335, United States). DNS resolution points to IP 172.66.47.29, which belongs to Cloudflare, Inc. The site presented a TLS certificate issued by Google Trust Services under the WE1 intermediate, confirming the use of a valid HTTPS connection. HTTP headers reveal enforcement of HSTS and support for HTTP/3, consistent with Cloudflare‑provided services. The authoritative nameservers are damien.ns.cloudflare.com and jamie.ns.cloudflare.com.

The page title returned by the server is “Suspected phishing site | Cloudflare”, and the HTTP response code is 403, indicating that the content is currently inaccessible, which aligns with the reported offline status. Security telemetry shows a Gridinsoft trust score of 0 / 100 and presence on a single blocklist. VirusTotal analysis reports that 11 of 93 scanning engines flagged the domain, reinforcing the malicious classification. Additionally, the domain is listed by PhishDestroy as a credential‑phishing site and appears on one external blocklist.

While the technical footprint confirms Cloudflare hosting and a valid certificate, the lack of visible content prevents verification of the exact credential‑phishing payload or the targeted brand. Defenders should therefore treat the domain as a high‑confidence credential‑phishing indicator. Recommended actions include adding the domain to outbound web‑filter deny lists, updating intrusion‑detection signatures that monitor connections to 172.66.47.29, and ensuring that any corporate email filtering rules block URLs that resolve to this host. Continuous monitoring of the domain’s DNS and reputation status is advised in case the site is re‑hosted or re‑activated.