29a7a368[.]verificators[.]pages[.]dev

This domain, 29a7a368.verificators.pages.dev, is currently flagged as an active credential theft operation. Analysis of the page title, 'Submit Form,' suggests an attempt to harvest user login credentials or sensitive information through deceptive submission prompts. No specific brand impersonation is detected, but the infrastructure aligns with known credential harvesting tactics. The domain remains operational and poses a high risk to unsuspecting users. Infrastructure analysis reveals the following technical indicators: the domain was registered on February 21, 2026, through Cloudflare, Inc., and resolves to the IP address 104.21.80.1, hosted on AS13335 (Cloudflare, Inc.) in the United States. Security vendor assessments show that 1 of 95 VirusTotal engines flagged this domain as malicious. Additionally, the domain appears on two security blocklists, and its SSL certificate is issued by Google Trust Services (WE1). The creation date, registrar, and hosting provider are consistent with patterns observed in credential theft campaigns. The domain remains active and unmitigated, requiring immediate caution. Users are advised to avoid interacting with the site or submitting any personal or sensitive information. Organizations should update security blocklists to include this domain and its associated IP address. Monitoring for similar domains registered through Cloudflare Pages with comparable naming conventions is recommended to preempt further credential theft attempts.