whitelist-tensorians[.]pages[.]dev

This domain, whitelist-tensorians.pages.dev, is flagged as an active brand impersonation threat targeting Tensor, a recognized technology platform. Analysis indicates the site mimics legitimate Tensor services under the fabricated brand name 'Tensorians,' likely to deceive users into credential submission or unauthorized transactions. No drainer kit signatures have been identified at this time, though the site structure suggests potential for future malicious payload delivery. Infrastructure analysis reveals the domain was registered on April 08, 2024, through Cloudflare, Inc., and resolves to IP address 104.21.80.1 (AS13335, Cloudflare, Inc., US). The site currently holds a VirusTotal detection score of 0/95, indicating no antivirus engines have flagged it as malicious. However, it appears on three security blocklists, including PhishDestroy, ScamSniffer, and Enkrypt. The SSL certificate is issued by Google Trust Services (WE1), a common practice among both legitimate and malicious sites leveraging Cloudflare infrastructure. Google Safe Browsing status remains unconfirmed in the current dataset. As of the latest verification, the domain remains active and continues to resolve. Response actions by security providers have resulted in partial blocking, though the absence of antivirus detections and reliance on Cloudflare hosting present ongoing risks. Organizations are advised to implement network-level blocking for 104.21.80.1 and the domain, monitor for credential theft patterns associated with Tensor impersonation, and update detection rules to include the observed indicators. Users should be alerted to verify domain authenticity before interacting with any Tensor-related services, particularly those hosted on pages.dev subdomains.