inqubeta-im[.]pages[.]dev

This domain is currently under investigation for operating as a generic phishing portal designed to harvest user credentials. Analysis indicates the site presents itself as a legitimate login interface, likely targeting users through deceptive email campaigns or malicious redirects. The objective appears to be the unauthorized collection of account credentials, which could be exploited for further compromise of personal or financial accounts. No specific brand impersonation has been confirmed at this stage, but the generic login structure suggests broad applicability across multiple services. Infrastructure analysis reveals the domain was registered through Cloudflare Pages on April 02, 2026, and resolves to the IP address 188.114.96.3, located in Canada and associated with Cloudflare, Inc. The domain currently shows 0 detections out of 95 security engines on VirusTotal, indicating low initial detection rates despite being flagged by two independent security blocklists. The SSL certificate is issued by Google Trust Services (WE1), a common characteristic of both legitimate and malicious sites leveraging free certificate authorities. The domain remains active and has not yet been widely flagged by detection platforms. Users who have visited inqubeta-im.pages.dev or entered credentials on the site should immediately cease all interaction and take corrective measures. Change passwords for any accounts accessed through the site, prioritizing email, financial, and administrative accounts. Enable multi-factor authentication where available to mitigate the risk of unauthorized access. Monitor accounts for suspicious activity, including unauthorized logins or transactions. If financial information was entered, contact relevant institutions to report potential fraud. Given the domain's recent creation and low detection rate, users should remain vigilant for phishing attempts referencing similar infrastructure or domains hosted on Cloudflare Pages.