karan-portfolio[.]pages[.]dev

This domain, karan-portfolio.pages.dev, is currently active and flagged as a generic phishing site designed to impersonate a personal portfolio. Analysis indicates the page is intended for credential harvesting, though no specific brand impersonation has been confirmed. The domain remains under investigation, with no prior history of confirmed malicious activity but sufficient indicators to warrant monitoring. Infrastructure analysis reveals the domain is registered through Cloudflare, Inc., and resolves to the IP address 172.66.44.132, geolocated to California. The SSL certificate is issued by Google Trust Services (WE1), a common characteristic of both legitimate and malicious sites leveraging Cloudflare’s infrastructure. The domain was created on May 01, 2026, and is currently flagged by one security blocklist, though it has not yet been detected by any of the 95 VirusTotal vendors. The page title, 'My Portfolio,' aligns with typical phishing lures used to deceive visitors into entering sensitive information. At present, the domain remains active and accessible. Organizations and individuals are advised to treat this domain as potentially malicious until further analysis confirms its legitimacy. Network administrators should consider blocking the domain and associated IP address (172.66.44.132) at the perimeter level. End users should avoid interacting with the site, particularly entering credentials or downloading files. Continuous monitoring of related infrastructure is recommended, as additional indicators may emerge.