userbase-homepage[.]pages[.]dev

The domain userbase-homepage.pages.dev is a phishing site engaged in brand impersonation targeting the 'across' platform. It presents itself as a legitimate service to deceive users into disclosing sensitive information, characteristic of credential phishing. As of the latest verification, userbase-homepage.pages.dev has been taken offline, though its prior activity poses residual risks to those who may have interacted with it.

Technical analysis of userbase-homepage.pages.dev reveals limited detection by security vendors, with 1 of 95 VirusTotal vendors flagging it as malicious. The domain was registered through Cloudflare, Inc. on February 21, 2026, and resolves to the IP address 172.66.45.47, hosted by Cloudflare in the US. It appears on 1 security blocklist (PhishDestroy) and uses an SSL certificate issued by Google Trust Services / WE1. The observed page title was 'Noebs', and the site employed technologies such as HSTS, Cloudflare, and HTTP/3. The Gridinsoft trust score for this domain is 0/100, further indicating its malicious nature.

Users who may have interacted with userbase-homepage.pages.dev should immediately change any passwords or credentials entered on the site, particularly for accounts related to the 'across' platform. Enable two-factor authentication (2FA) on all critical accounts to mitigate unauthorized access. Monitor financial and account activity for signs of fraud or unauthorized transactions. Report the phishing domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) at reportphishing@apwg.org, and consider submitting the domain to additional blocklists or security vendors for broader awareness.