build-analyze[.]pages[.]dev

This domain, build-analyze.pages.dev, is currently under investigation for credential theft targeting developers and technical users. The page title, CODE COMPILER, suggests an attempt to impersonate legitimate development tools or platforms, potentially luring victims into submitting sensitive login credentials or API keys. As of the latest assessment, the domain remains active and accessible. Analysis indicates the domain is hosted on Cloudflare infrastructure, resolving to the IP address 172.66.47.161, which is geolocated in the United States under AS13335 (Cloudflare, Inc.). The SSL certificate is issued by Google Trust Services (WE1), a common configuration for legitimate and malicious domains alike. VirusTotal reports 0 detections out of 95 security vendors, indicating no prior flagging by major engines. However, the domain appears on one security blocklist and is blocked by PhishDestroy, suggesting emerging detection by specialized tools. No historical registration data is publicly available due to Cloudflare's privacy policies for Pages domains. The domain remains operational, and users are advised to exercise caution when encountering it. Organizations should consider blocking access to 172.66.47.161 and monitoring for connections to build-analyze.pages.dev in network logs. End-users should verify the authenticity of any development tool or compiler interface before entering credentials. Security teams are encouraged to correlate this domain with other credential theft campaigns, particularly those targeting developer environments or cloud-based workflows.