nodeportals[.]pages[.]dev

The domain nodeportals.pages.dev is identified as a brand impersonation threat targeting Microsoft. The current status of this domain is active and poses a high risk to users due to its intent to deceive and mislead potential victims.

Analysis of the domain shows that it has been flagged by 1 of 95 VirusTotal security vendors, indicating that the majority of vendors do not yet recognize it as malicious. The domain was registered through Cloudflare, Inc. on May 19, 2026, and it resolves to the IP address 188.114.96.3, which is located in Canada. This domain appears on 2 security blocklists, which further corroborates its malicious intent, and it has been actively blocked by services such as PhishDestroy and ScamSniffer, highlighting its significant threat to users.

The current status of nodeportals.pages.dev remains active, and it is essential for users to exercise caution. Recommendations include monitoring the domain through security services, informing potential victims about its impersonation of Microsoft, and advocating for user awareness regarding phishing threats. Additionally, organizations should consider updating their security measures to include this domain in their threat intelligence feeds.