business-blue-tick-confirmed-000052026[.]pages[.]dev

This domain, business-blue-tick-confirmed-000052026.pages.dev, is a brand impersonation threat specifically designed to trick users into believing they are applying for a verified business blue tick on a social media platform. The domain structure mimics legitimate verification processes, but it is a credential theft portal that captures login credentials and personal information. The use of the .pages.dev subdomain, a Cloudflare Pages service, allows attackers to quickly host and modify the phishing infrastructure while evading traditional reputation-based blocklists.

Technical analysis reveals that the domain is registered through Cloudflare, Inc. and resolves to IP address 172.66.45.43. VirusTotal reports 0/95 detections, meaning no security vendors currently flag this domain as malicious. The domain remains active under investigation, with no creation date publicly available due to Cloudflare's registration policies. No blocklist counts are available as it is not yet categorized by major threat intelligence feeds, indicating a recent deployment before widespread detection.

Users who have visited this domain should immediately change their social media account passwords and enable two-factor authentication if not already active. They should monitor for unauthorized login attempts and report the domain to Cloudflare's abuse department. Avoid entering any personal or financial information on pages served through .pages.dev subdomains, as these are not official verification portals. Run a full antivirus scan on any device used to access the site to check for potential credential theft malware. If credentials were submitted, assume they are compromised and take corrective actions across all accounts using the same password.