bantuan-google-mmng-mantap[.]pages[.]dev

This domain, bantuan-google-mmng-mantap.pages.dev, is currently under investigation for brand impersonation targeting Google. Analysis indicates the threat type involves deceptive credential harvesting or financial fraud, disguised as a gaming platform with the page title 'ZEUS007 🖇️ Situs Main Games Online Tanpa Pakai Modal Besar Tapi Dapat Cuan Besar.' The domain leverages social engineering tactics to exploit users seeking online gaming services, potentially leading to unauthorized access or financial loss.

Infrastructure analysis reveals the domain resolves to the IP address 172.66.47.153, hosted by Cloudflare, Inc. in Canada. It was registered through Cloudflare Pages on April 24, 2026, and employs a Let's Encrypt SSL certificate (serial number E7). Detection metrics show 0 out of 95 security engines on VirusTotal flagged the domain at the time of assessment, suggesting limited prior exposure. The domain appears on one security blocklist and is actively blocked by PhishDestroy, though it remains operational. The absence of prior detections and the use of a reputable hosting provider may contribute to its evasion of automated detection systems.

Mitigation measures should prioritize blocking the domain and its associated IP address (172.66.47.153) at the network perimeter. Organizations are advised to implement real-time monitoring for similar subdomain patterns under the 'pages.dev' namespace, particularly those mimicking legitimate brands. End-user education should emphasize verifying domain authenticity before interacting with purported gaming or financial platforms. Security teams should also monitor for secondary payload delivery, as the domain may serve as a staging ground for further malicious activity. Given the domain's active status, continuous assessment and cross-referencing with updated threat intelligence feeds are recommended.