mimi-bs3[.]pages[.]dev

Analysis of the domain mimi-bs3.pages.dev indicates a high‑risk, active generic phishing infrastructure. The domain resolves to the IP address 188.114.97.3, a host frequently associated with cloud‑based services. Registration details show the domain was created on March 27, 2026 and is provisioned through Cloudflare, Inc., using the authoritative nameservers elias.ns.cloudflare.com and tani.ns.cloudflare.com. VirusTotal scans have returned 11 positive detections out of 91 security vendors, confirming that multiple AV engines flag the domain as malicious.

Google Safe Browsing classifies the site under the social engineering category, reinforcing the phishing label. The domain appears on two independent security blocklists and is actively blocked by the PhishDestroy and ScamSniffer filtering services. These multiple independent detections suggest the domain is being used to host or relay phishing content, although the exact payload or targeted brand has not been publicly disclosed. Uncertainty remains regarding the specific phishing kit, content served, and any associated command‑and‑control infrastructure, as no page title or HTTP response details are available.

Defenders should add 188.114.97.3 and the fully qualified domain name to network‑level deny lists, enforce DNS filtering that includes the identified blocklists, and monitor for any outbound connections to the host. Continuous re‑scanning of the domain via multi‑engine services is advised to capture any evolution of the threat. Organizations should also educate users about the risk of social‑engineering links that may appear to originate from legitimate Cloudflare‑hosted sites, as the infrastructure can be leveraged to obscure the true origin of malicious pages.