businees-verify-badge-vip-1234x[.]pages[.]dev

This domain, businees-verify-badge-vip-1234x.pages.dev, is identified as a credential phishing site designed to harvest user login credentials through a fake authentication portal. Analysis indicates the page mimics a verification or account validation process, likely targeting users under the pretense of security updates or account reactivation. The domain is currently offline, but prior activity suggests it was actively used in phishing campaigns. Infrastructure analysis reveals the domain was created on June 16, 2026, and registered through Cloudflare, Inc. It resolves to the IP address 188.114.96.3 and employs technologies such as HSTS, Cloudflare proxy services, and HTTP/3. The SSL certificate is issued by Google Trust Services, a common feature in phishing domains to appear legitimate. Security vendors flagged this domain on VirusTotal, with 15 out of 95 engines detecting malicious activity. It appears on one security blocklist, and independent trust scoring systems assign it a score of 0 out of 100, indicating high confidence in its malicious nature. The domain has been taken offline, but similar infrastructure may still pose risks. Organizations and users are advised to block the domain and associated IP address (188.114.96.3) at the network level. Security teams should monitor for related domains using the same registrar or hosting patterns, particularly those leveraging Cloudflare Pages with similar naming conventions. End-users should be educated on recognizing phishing attempts, especially those impersonating account verification processes, and encouraged to verify URLs independently before entering credentials.