# welcome-probase-helps.pages.dev — MALICIOUS

> Find out why welcome-probase-helps.pages.dev is flagged as a high-risk phishing site and what to do if you encountered it.

## Summary
PhishDestroy identifies welcome-probase-helps.pages.dev as a high-risk phishing domain that was taken offline after being flagged for social engineering. Phishing sites like this aim to trick users into divulging sensitive information such as passwords or financial details by masquerading as legitimate services.

This particular domain was registered recently and appeared on multiple security blocklists, including Google Safe Browsing's social engineering warnings. Attackers used it to lure victims with deceptive content designed to steal personal data. With Cloudflare hosting and detection by numerous security vendors, the site posed a serious threat before being disabled.

If you visited welcome-probase-helps.pages.dev, it's important to remain vigilant. Avoid entering any personal information, run a thorough antivirus scan, and monitor your accounts for suspicious activity. Changing passwords for related accounts and enabling multi-factor authentication can help protect against potential compromise.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.44.249
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["anton.ns.cloudflare.com", "brenna.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Lionic", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019adb16-dca1-768d-abee-3355c2248810.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/0a10d030-39fb-4134-a73f-5cf1ba1ece7b
- PhishDestroy: https://phishdestroy.io/domain/welcome-probase-helps.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/welcome-probase-helps.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/welcome-probase-helps.pages.dev/
Last updated: 2026-03-19