jigsawbusinessgroup[.]pages[.]dev

This domain, jigsawbusinessgroup.pages.dev, is flagged as a high-risk financial scam phishing site. Analysis of the page title, "Gurita Bisnis Jigsaw Grup Monopoli Sistem Keuangan Slot Gacor," indicates it targets users of online slot gambling platforms, likely attempting to harvest credentials or financial details under the guise of a business group. No specific drainer kit signatures were identified, but the language and theme suggest a focus on fraudulent financial schemes rather than traditional credential theft. Infrastructure analysis reveals the domain was registered on February 27, 2026, through Cloudflare, Inc., and resolves to the IP address 188.114.96.3, hosted on AS13335 (Cloudflare, Inc.) in the United States. The SSL certificate is issued by Let's Encrypt (serial number E8). Detection metrics show 1/95 security vendors on VirusTotal flagging the domain, and it appears on a single security blocklist. Google Safe Browsing (GSB) status is not explicitly provided, but the domain is actively blocked by at least one threat intelligence feed. The domain remains active as of the latest verification, posing an ongoing risk to users. Response actions should include immediate blocking at the DNS or network level, particularly for organizations in the financial or gambling sectors. Remaining risk includes potential exposure for users searching for slot gambling platforms, as the site leverages social engineering tactics to appear legitimate. Monitoring for related domains or IPs associated with this registrar and hosting provider is recommended to identify potential campaign expansion.