babaduba[.]pages[.]dev

This domain, babaduba.pages.dev, is flagged as an active phishing threat targeting users with a 'Claim Reward' lure. Registered on May 17, 2026, through Cloudflare, it resolves to the IP 188.114.97.3 and remains operational as of July 12, 2026. Infrastructure analysis reveals the use of Cloudflare hosting, Let's Encrypt SSL certificates, and HTTP/3 protocol, alongside HSTS enforcement and jsDelivr for content delivery—common tactics to lend legitimacy to phishing pages. The domain appears on one security blocklist and is blocked by at least one anti-phishing service, with a trust score of 0/100, indicating high confidence in its malicious nature. While four security vendors on VirusTotal have flagged the domain, the exact nature of the phishing campaign (e.g., targeted brand, credential harvesting method) is not yet confirmed, as the page content has not been fully analyzed. Defenders should treat this domain as high-risk and prioritize blocking it at the DNS or network level. Monitoring for related subdomains or newly registered lookalike domains under the same registrar may help preempt further campaigns. Given the domain's recent creation and active status, continued vigilance is advised.