claim-7tj[.]pages[.]dev

The domain claim-7tj.pages.dev is assessed as a high-risk, brand impersonation threat. This domain is actively impersonating Facebook, a well-known social media platform, to deceive users and potentially harvest sensitive information. The threat is currently active and poses a significant risk to unsuspecting visitors.

Analysis indicates that claim-7tj.pages.dev was created on January 06, 2026, and is registered through Cloudflare, Inc. The domain resolves to the IP address 2001:4860:482c:7700::, which is located in the United States and is associated with AS15169 Google LLC. Despite the SSL certificate issued by Google Trust Services / WE1, the domain is flagged as a phishing site by Google Safe Browsing. Additionally, the domain appears on two security blocklists and is blocked by PhishDestroy and ScamSniffer. On VirusTotal, 11 out of 95 security vendors flag this domain as malicious. The page title 'Google' further obfuscates the true nature of the site, adding to the confusion and potential risk for users.

To mitigate the risks associated with this brand impersonation threat, users are advised to verify the URL and domain name before entering any personal information. Security teams should consider adding claim-7tj.pages.dev to their firewall and DNS blocklists to prevent access from within their networks. Conducting regular security awareness training to educate employees about the signs of brand impersonation and phishing attacks is also recommended. Organizations should monitor their brand's online presence and report any suspicious activity to the relevant authorities and domain registrars.