verify-badge-vip3[.]pages[.]dev

The domain verify-badge-vip3.pages.dev has been identified as a credential phishing threat. This site is designed to steal login credentials by impersonating a trusted brand, though no specific brand name was disclosed in the intelligence. The phishing kit used appears to be a generic credential harvester rather than a known drainer kit. The threat type is credential phishing, which poses a high risk of account takeover for anyone who enters sensitive information on the page.

Technical indicators are concerning: VirusTotal shows 15 out of 95 security vendors flagging this domain as malicious. The domain is registered through Cloudflare, Inc., and resolves to IP address 172.66.44.136. It was created on June 12, 2026, which is notably in the future, suggesting possible data manipulation or a placeholder date. The domain appears on 1 security blocklist and its SSL certificate was issued by Google Trust Services / WE1. Google Safe Browsing status was not explicitly provided, but the combination of a future creation date and widespread vendor flags elevates the risk level to elevated.

As of the latest assessment, the site is offline and displays the page title "Suspected Phishing | Cloudflare," indicating that either the hosting provider or a security service has taken action to block access. Despite this takedown, users who previously visited the site may have already compromised their credentials. It is strongly recommended that anyone who interacted with this domain change their passwords immediately and enable multi-factor authentication on affected accounts. Continuous monitoring for unauthorized access is advised, and the full report should be reviewed for additional forensic details.