safe-badge-welcome-page-00002guide[.]pages[.]dev

This domain, safe-badge-welcome-page-00002guide.pages.dev, poses a high-risk brand impersonation threat targeting Cloudflare users. Analysis indicates the page mimics legitimate Cloudflare authentication portals, likely designed to harvest credentials or distribute malicious payloads under the guise of official branding. The page title, 'Suspected Phishing | Cloudflare,' further suggests an attempt to deceive users into believing the site is affiliated with the legitimate service provider. Infrastructure analysis reveals the domain is registered through Cloudflare, Inc., and resolves to the IP address 172.66.44.76. The SSL certificate is issued by Google Trust Services, a common tactic to lend false legitimacy. As of the latest scan, 10 out of 95 security vendors on VirusTotal have flagged this domain as malicious. The domain remains active, with no observed blocklist delistings or takedown requests, indicating persistent operational status. Users who have visited this domain should immediately revoke any entered credentials and monitor accounts for unauthorized activity. System-level scans using updated detection signatures are recommended to identify potential malware exposure. If credentials were submitted, reset passwords for all associated accounts, particularly those linked to Cloudflare or other critical infrastructure services. Network administrators should block the domain and its resolving IP at the perimeter to prevent further access attempts.