businees-verify-badge-vip-123645cvw[.]pages[.]dev

PhishDestroy has identified a high-risk credential phishing campaign targeting users through the domain businees-verify-badge-vip-123645cvw.pages.dev. This specific threat is designed to steal login credentials by impersonating Facebook's verification badge process, luring victims into entering their account details under the guise of a security verification step. The site remains active and poses a significant risk to anyone who encounters it.

Technical indicators paint a clear picture of malicious intent. The domain was created on June 16, 2026, and is registered through Cloudflare, Inc., with SSL issued by Google Trust Services (WE1). It resolves to IP address 172.66.44.178 and currently displays a page titled "Loading..."—a common tactic to appear legitimate while harvesting credentials. VirusTotal analysis shows that 7 out of 95 security vendors flag this domain as malicious, and it appears on at least one security blocklist. These metrics confirm the domain's active involvement in credential theft operations.

To protect against this threat, users should never enter credentials or personal information on this domain. Organizations should block access to businees-verify-badge-vip-123645cvw.pages.dev at the network level and report the domain to Cloudflare for abuse. Enable multi-factor authentication on all accounts, especially Facebook, and monitor for unauthorized login attempts. If credentials were entered, change passwords immediately and scan devices for malware that may have been delivered alongside the phishing page.