home-base-pro-io[.]pages[.]dev

Analysis indicates that the domain home-base-pro-io.pages.dev was registered through Cloudflare on 21 February 2026 and is currently marked offline. The authoritative nameservers tony.ns.cloudflare.com and jacqueline.ns.cloudflare.com resolve the domain to the Cloudflare edge address 188.114.96.3, which is located in the United States and belongs to ASN 13335 (Cloudflare, Inc.). An HTTP request returns a 403 status code and the page title presented by Cloudflare reads “Suspected phishing site | Cloudflare”, confirming that the service has flagged the host as a phishing destination. The site is classified as a brand impersonation phishing campaign; Google Safe Browsing lists it under social‑engineering, and PhishDestroy has added it to its blocklist.

VirusTotal reports that 11 of 93 scanned scanners flagged the domain, reinforcing the malicious assessment. The SSL certificate is issued by Google Trust Services (WE1), indicating that TLS is correctly terminated but does not mitigate the underlying abuse. Additional infrastructure signals include the presence of HSTS, Cloudflare CDN, and HTTP/3 support, all typical of legitimate Cloudflare‑protected sites but also leveraged by malicious operators. Gridinsoft assigns a trust score of 0 out of 100, reflecting extreme risk.

No further behavioral data such as payload delivery or credential harvesting is available because the site is offline, and no sandbox or sinkhole observations have been published. Defenders should continue to block the domain at network perimeters, update endpoint and DNS filtering policies, and monitor for any resurgence of the host or its IP range. Correlation with other Cloudflare‑hosted phishing domains may reveal shared infrastructure, and threat‑intel feeds should be checked for the 188.114.96.3 address to catch related activity.