business-for-skills[.]pages[.]dev

Analysis of the domain business-for-skills.pages.dev indicates a high‑risk credential phishing operation that has been taken offline as of the report date. The domain was registered on September 24 2025 through Cloudflare, Inc. and resolves to the Cloudflare‑owned address 172.66.47.99, located in the United States under ASN 13335. The site returned an HTTP 403 response and presented the page title "Suspected phishing site | Cloudflare," confirming that the hosting provider flagged the content as malicious. Google Safe Browsing classifies the URL as a social‑engineering threat, and PhishDestroy has listed it on a blocklist, confirming its detection by at least one dedicated anti‑phishing service.

VirusTotal analysis shows that 20 of 95 scanning engines flagged the domain, and the Gridinsoft trust score of 0 / 100 alongside Scamadviser’s 1 / 100 rating further underscore its malicious reputation. The infrastructure employs standard Cloudflare security features, including HSTS and HTTP/3, and the TLS certificate is issued by Google Trust Services (WE1), indicating a legitimate certificate chain but not mitigating the phishing intent. The identified scam type is credential phishing, targeting user credentials, though the specific victim brand or lure has not been disclosed.

Uncertainty remains regarding the exact phishing payload, distribution channels, and any associated command‑and‑control infrastructure because the site is offline and no page content beyond the title has been captured. Defensive recommendations include adding the domain and its resolving IP to blocklists, monitoring for any future resurrection on the same IP range, and enforcing strict outbound filtering for credential‑related traffic. Organizations should also ensure their employees are aware of the social‑engineering risk flagged by Google Safe Browsing and verify any unexpected login requests against known legitimate URLs.