claims-brc[.]pages[.]dev

The domain claims‑brc.pages.dev was registered on February 21 2026 through Cloudflare, Inc. DNS resolution points to the Cloudflare‑owned address 172.66.44.152, which is announced by AS13335 in the United States. The authoritative name servers are justin.ns.cloudflare.com and coraline.ns.cloudflare.com, indicating that the site is hosted entirely on the Cloudflare network.

Infrastructure analysis shows the site serves HTTP 200 responses over TLS. The TLS certificate is issued by Google Trust Services under the WE1 profile, confirming a valid HTTPS endpoint. Detected front‑end libraries include Webflow, Unpkg, SweetAlert2, jsDelivr, crypto‑js, cdnjs and the presence of HSTS, all delivered via Cloudflare’s CDN. Gridinsoft assigns a trust score of 0 / 100, and the domain appears on three public blocklists (PhishDestroy, ScamSniffer, Enkrypt). VirusTotal has flagged the domain by one of ninety‑five scanners.

Threat intelligence classifies the site as a high‑risk brand‑impersonation campaign targeting Apple, employing a tech‑support scam narrative. The page title reported is “BRC App”, and the scam type is listed as tech_support. No additional content analysis is available, so the exact user‑facing deception tactics remain unverified, but the combination of brand targeting, a legitimate‑looking title, and the low trust score supports a high confidence assessment of malicious intent.

Defenders should immediately block claims‑brc.pages.dev at perimeter and endpoint filters, and add it to internal deny lists. Continuous monitoring of DNS queries and outbound connections to 172.66.44.152 is advised to detect any lingering attempts. Where possible, sinkholing the domain can disrupt the infrastructure. Security teams should also update detection signatures to include the observed technology stack and the specific page title, and share indicators of compromise with peers to broaden protection.