brawlgemz[.]pages[.]dev

This domain, brawlgemz.pages.dev, is currently flagged as an active phishing site impersonating the Brawl Stars franchise to deceive users into participating in a fraudulent gem event. The threat type is classified as brand impersonation phishing, targeting players of the mobile game with promises of in-game rewards to harvest credentials or financial information. As of the latest analysis under seed f66cd5, the domain remains operational and has not yet been widely detected by security vendors. Infrastructure analysis reveals the domain was registered on June 07, 2026, through Cloudflare Pages, a platform commonly used for static site hosting. It resolves to the IP address 172.66.44.69, which is part of a known content delivery network infrastructure. The SSL certificate is issued by Let's Encrypt under the identifier YE1, providing HTTPS encryption to lend an appearance of legitimacy. Despite its active status, the domain has only been flagged on one security blocklist, PhishDestroy, and has received 0 detections out of 95 vendors on VirusTotal, indicating low initial detection coverage. The risk posed by this domain remains under investigation, though its continued operation and targeted impersonation of a popular gaming brand present a credible threat to end users. Users are advised to avoid interacting with the site and to verify all in-game reward offers through official channels only. Network administrators should consider blocking the domain and associated IP address 172.66.44.69 at the perimeter level. Security teams are encouraged to monitor for additional indicators of compromise, including credential submission patterns or secondary payload delivery, as this campaign may evolve.