what-is-ubisoft-connect-on-xbox[.]pages[.]dev

Analysis of the domain what-is-ubisoft-connect-on-xbox.pages.dev indicates that the site is actively being leveraged for phishing. The domain is hosted on Cloudflare’s infrastructure, registered through Cloudflare, Inc., and resolves to the IP address 188.114.96.3. Nameserver records point to joyce.ns.cloudflare.com and kanye.ns.cloudflare.com, confirming the use of Cloudflare’s DNS services. The domain appears on one external security blocklist and is also listed by the PhishDestroy blocking feed, demonstrating that at least one reputable anti‑phishing provider has identified it as malicious.

VirusTotal has processed the domain through 91 independent scanners; none of the engines reported a detection at the time of analysis. While the lack of detections does not equate to safety, it does show that the payload or page content has not yet triggered signatures in those engines. No public information about the site’s SSL certificate, HTTP response codes, or page title is currently available, limiting deeper content‑based attribution. The limited intelligence suggests the primary malicious behavior is credential harvesting, likely targeting users of Ubisoft services on Xbox platforms, as implied by the domain name.

However, without a captured page snapshot the exact lure technique and credential fields remain uncertain. Defenders should block the domain at network perimeter, include the IP address 188.114.96.3 in host‑based deny lists, and monitor DNS queries for the two Cloudflare nameservers. Continuous re‑scanning on VirusTotal and periodic checks against updated blocklists are advised to detect any changes in the domain’s behavior. Users should be warned that any unsolicited request to log into Ubisoft Connect via this URL is fraudulent and may result in credential compromise.