james-huston49823563[.]pages[.]dev

This domain, james-huston49823563.pages.dev, has been identified as a brand impersonation threat specifically targeting Facebook. The page, titled Business Help Center | Privacy Policy, mimics official Facebook business support resources to deceive users into disclosing credentials or sensitive information. Analysis indicates the domain is currently offline, though prior activity aligns with credential harvesting tactics commonly employed in phishing campaigns. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on March 14, 2026, and resolves to the IP address 172.66.44.55, which is geolocated in the United States under AS13335 (Cloudflare, Inc.). Detection metrics confirm elevated risk: 17 of 95 security vendors on VirusTotal flagged the domain as malicious. The domain appears on two independent security blocklists and was actively blocked by PhishDestroy and PhishingDB. The SSL certificate, issued by Google Trust Services (WE1), further corroborates the use of legitimate-appearing infrastructure to evade initial scrutiny. Current status indicates the domain has been taken offline, though the underlying infrastructure remains a potential vector for future campaigns. Organizations and users are advised to treat all communications originating from this domain as malicious. Immediate actions include blocking the domain and IP at the network perimeter, updating endpoint detection rules to include the VirusTotal detection signatures, and monitoring for residual redirects or cached instances. Users who may have interacted with the domain should initiate credential rotation for any accounts accessed during the exposure window, particularly those associated with the impersonated brand.