connect-auth-balncer-fiance[.]pages[.]dev

PhishDestroy identifies connect-auth-balncer-fiance.pages.dev as an active phishing domain currently under investigation for generic phishing targeting financial credentials.

This domain was flagged with a 3/95 detection rate on VirusTotal, indicating no current blacklisting despite clear suspicious behavior. Registered through Cloudflare, Inc., it resolves to IP 172.66.45.20 and operates under a Google Trust Services SSL certificate. The use of Cloudflare Pages hosting suggests an attempt to appear legitimate while avoiding traditional takedown methods.

Financial phishing domains like this typically mimic authentication portals to harvest login credentials. Users should avoid entering any personal or financial information on this domain. If you've interacted with this site, immediately change passwords used there and enable multi-factor authentication on all financial accounts. Report suspicious activity to your bank or credit card issuer and consider using a password manager to detect fake login pages. Always verify domains through official channels before submitting sensitive information.