s4kj0dxrmdfybkpc46qcltq[.]pages[.]dev

This domain, s4kj0dxrmdfybkpc46qcltq.pages.dev, was registered on February 21, 2026, through Cloudflare, Inc. and analyzed on July 23, 2026. It is identified as a credential phishing threat. The domain currently returns HTTP status 403 and displays the page title 'Suspected phishing site | Cloudflare', indicating Cloudflare has proactively blocked the content. It resolves to IP 188.114.97.3, hosted in the United States on AS13335 (Cloudflare). SSL certificate is issued by Google Trust Services (WE1).

Security checks show 15 of 93 VirusTotal vendors flagging the domain, and it appears on one security blocklist. Trust scores are critically low: Scamadviser scores 1/100, Gridinsoft scores 0/100. The domain employs HSTS and HTTP/3 technologies. It is currently taken offline and blocked by PhishDestroy.

Nameservers are raegan.ns.cloudflare.com and ryan.ns.cloudflare.com. While the exact phishing page content has not been captured for visual analysis, the combination of low trust scores, vendor detections, and Cloudflare's own warning page strongly supports the credential phishing classification. Defenders should ensure any user credentials previously entered on this domain are revoked immediately, monitor for related subdomains under pages.dev, and add the domain to internal blocklists as a confirmed credential harvesting site. No evidence of additional infrastructure connections or shared hosting with other known phishing domains was observed in this analysis.