beryn-hub[.]pages[.]dev

The domain beryn-hub.pages.dev is identified as posing a generic phishing threat with an elevated risk level. Currently, the domain is offline, which mitigates immediate risk. However, its prior activity suggests a potential impersonation attempt, although the specific brand or entity it targeted was not disclosed. This domain's operation was significant enough to warrant inclusion in security blocklists.

Detailed analysis shows that this domain was flagged by 15 out of 95 security vendors on VirusTotal, indicating a widespread recognition of its malicious intent. It was registered through Cloudflare, Inc., and resolved to the IP address 188.114.97.3 located in the United States under the autonomous system AS13335 managed by Cloudflare, Inc. Notably, the domain was created on November 1, 2025, which suggests a future registration anomaly, possibly indicating backdated or fraudulent registration practices. Additionally, it was blocked by PhishDestroy and PhishingDB, underscoring its threat level and potential impact.

Although the domain is currently offline, it remains listed on two security blocklists, reflecting its prior malicious activity. Security measures should be enhanced to protect against similar threats, including implementing robust email filtering systems and educating users on identifying phishing attempts. Regular updates to security systems and blocklists will help mitigate risks from domains like beryn-hub.pages.dev. Continuous monitoring of new domain registrations and IP resolutions can provide early warning signs of potential phishing campaigns.