loracomdo[.]pages[.]dev

Analysis of the domain loracomdo.pages.dev indicates active brand-impersonation targeting Cloudflare infrastructure. The domain was registered on May 27, 2026, through Cloudflare Pages, a legitimate hosting service often exploited for phishing due to its free tier and automatic SSL provisioning. Infrastructure analysis reveals the domain resolves to IP 188.114.97.3, geolocated in Canada and associated with Cloudflare, Inc. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites due to its automation and cost-free nature. The page title, 'MEGA777 : Situs Slot Gacor 2026 Hari Ini Link Mpo Toto Slot Online Resmi,' suggests the site is presenting itself as an online gambling platform, which is inconsistent with Cloudflare's core services. This discrepancy, combined with the domain's presence on one security blocklist (PhishDestroy), supports the classification of credential phishing. The Gridinsoft trust score of 0/100 further indicates a high-risk assessment by that vendor. As of July 12, 2026, the domain remains active and returns an HTTP 200 status, confirming its operational status. While the domain has been scanned by 91 vendors on VirusTotal, none currently flag it as malicious. However, the absence of detections does not confirm safety, particularly given the domain's recent registration and the presence of other risk indicators. Defenders should treat this domain as suspicious, particularly in environments where Cloudflare credentials are used. Recommended actions include blocking the domain at the network level, monitoring for credential submissions or redirects, and alerting users to the potential risk of brand impersonation. Further investigation into the site's content and backend infrastructure is necessary to determine the full scope of the threat.