business-for-brynverokjjk[.]pages[.]dev

The domain business-for-brynverokjjk.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and is served by the Cloudflare nameservers pearl.ns.cloudflare.com and edward.ns.cloudflare.com. DNS resolution points to IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. located in the United States. The site was identified as a credential phishing operation; the page title returned by the server is "Suspected phishing site | Cloudflare" and the HTTP status code is 403, indicating the content is currently inaccessible and the domain has been taken offline. Technical fingerprints reveal the presence of HSTS, Cloudflare edge services, and HTTP/3 support, while the TLS certificate is issued by Google Trust Services under the WE1 label, a common certificate chain for Cloudflare‑hosted pages.

Threat intelligence sources have flagged the domain on at least one security blocklist and PhishDestroy has actively blocked it. VirusTotal analysis shows that 15 of 93 security vendors marked the domain as malicious, reinforcing the suspicion of phishing activity. Additionally, Gridinsoft assigned a trust score of 0 out of 100, the lowest possible rating, further indicating a high likelihood of abuse. What remains uncertain is the exact content that was hosted before the takedown, any targeted brand or login portal, and whether the infrastructure is being reused for other campaigns.

No public victim reports or malware payloads have been linked to this domain, and the short lifespan (registered less than five months ago) suggests a fast‑flux or throwaway approach. Defenders should block business-for-brynverokjjk.pages.dev at DNS and proxy layers, add the IP 188.114.97.3 to deny lists, and monitor for any re‑registration of the same sub‑domain pattern on Cloudflare or other CDNs.