business-for-synvero-qrv[.]pages[.]dev

This domain, business-for-synvero-qrv.pages.dev, is flagged as a credential phishing site and is currently offline as of July 24, 2026. Infrastructure analysis reveals it was registered through Cloudflare on February 21, 2026, and resolves to IP 172.66.46.214 (AS13335, Cloudflare, Inc., US). The domain uses Cloudflare nameservers (pearl.ns.cloudflare.com, edward.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1). At the time of assessment, the HTTP status returned a 403 error, and the page title displayed 'Suspected phishing site | Cloudflare,' indicating Cloudflare's own detection mechanisms may have intervened.

The domain appears on at least one security blocklist, and 16 of 93 security vendors on VirusTotal flagged it as malicious. Trust scores from Scamadviser and Gridinsoft both indicate minimal legitimacy, with scores of 1/100 and 0/100, respectively. Technologies detected include HSTS and HTTP/3, which are consistent with Cloudflare-hosted infrastructure. While the exact target or brand impersonated is not specified in available data, the scam type is classified as credential phishing.

Defenders should treat this domain as high-risk for credential harvesting attempts. Recommended actions include blocking the domain and IP at perimeter security controls, monitoring for related subdomains or newly registered lookalike domains, and reviewing logs for any prior connections to this infrastructure. Given the domain's current offline status, further analysis of its payload is not possible at this time, but historical indicators should be retained for threat hunting purposes.