salomon-bvi[.]pages[.]dev

The domain salomon-bvi.pages.dev is a generic phishing site designed to steal user credentials through credential phishing. It does not impersonate a specific brand or deploy a known crypto drainer kit. As of the latest verification, salomon-bvi.pages.dev has been taken offline, though it previously posed an elevated risk to visitors.

Technical indicators confirm the domain's malicious intent. VirusTotal reports 2 of 95 security vendors flagged salomon-bvi.pages.dev, including LevelBlue and the Phishing Database. The domain was registered through Cloudflare, Inc. on November 23, 2025, and resolves to the IP address 188.114.96.3, hosted by Cloudflare in Canada. It appears on one security blocklist (PhishDestroy) and uses an SSL certificate issued by Google Trust Services / WE1. The observed page title was 'Solomon,' and the site employed technologies such as HSTS, Cloudflare, and HTTP/3. Gridinsoft assigned a trust score of 0/100, further indicating its phishing nature.

Users who interacted with salomon-bvi.pages.dev should immediately change any passwords entered on the site, enable two-factor authentication (2FA) on affected accounts, and monitor for unauthorized access or fraudulent activity. Victims are advised to report the phishing domain to their email provider, browser vendor (e.g., Google Safe Browsing), and relevant cybersecurity organizations such as the Anti-Phishing Working Group (APWG) or local CERT teams.