43iyfsbd[.]pages[.]dev

This domain, 43iyfsbd.pages.dev, is currently under investigation for brand impersonation targeting Google. Registered on April 30, 2025, through Cloudflare, Inc., the domain remains active as of July 12, 2026, with a confirmed HTTP 200 status. Infrastructure analysis reveals Cloudflare nameservers (kyree.ns.cloudflare.com and evangeline.ns.cloudflare.com) and resolution to IP 104.21.37.228, hosted on AS13335 in the United States. The page title explicitly displays 'Google,' aligning with the reported scam type of brand impersonation. The domain appears on one security blocklist, specifically PhishDestroy, and utilizes an SSL certificate issued by Google Trust Services (WE1). Detected technologies include Google Web Server, HSTS, and HTTP/3, which may be leveraged to enhance perceived legitimacy. While no malicious detections were reported by the 93 vendors that scanned the domain, the absence of flags does not confirm safety. Defenders should prioritize monitoring for credential harvesting or malicious redirects, as the domain’s infrastructure and branding elements are consistent with phishing operations. Further analysis of the site’s content and behavior is recommended to determine the exact nature of the threat. Immediate blocking or takedown requests should be considered given the active status and confirmed impersonation of a high-value brand.