business-growth[.]busines-help-center[.]com

This domain is flagged as an active generic phishing threat designed to harvest user credentials through a fake login interface. Analysis indicates the site mimics an "Accounts Centre" portal, a common tactic in credential theft campaigns targeting unsuspecting users under the guise of legitimate account management services.

Infrastructure analysis reveals multiple high-confidence indicators of compromise. The domain resolves to IP address 172.66.0.96, hosted by Cloudflare in Canada, and is registered through Gransy, s.r.o., a registrar frequently associated with malicious domains. The domain was created on May 07, 2026, an anomalous future date suggesting potential WHOIS manipulation to evade detection. Security vendors on VirusTotal flag the domain at 23/95, while it appears on one security blocklist and is actively blocked by enterprise-grade phishing detection systems. The SSL certificate, issued by Google Trust Services (WE1), provides minimal trust assurance due to the domain's fraudulent nature.

To mitigate risks associated with this fake login page, users should avoid interacting with the domain entirely. Organizations should implement DNS-based blocking for 172.66.0.96 and the domain itself, while monitoring for credential reuse attempts from affected accounts. Security teams are advised to review logs for connections to the domain or IP, particularly from endpoints exhibiting anomalous authentication patterns. Multi-factor authentication (MFA) should be enforced as an additional safeguard against stolen credentials, and users should be educated on recognizing phishing tactics, such as scrutinizing domain names and verifying SSL certificate details before entering sensitive information.