allthingslemon[.]pages[.]dev

The domain allthingslemon.pages.dev is currently under investigation for a credential theft campaign. The domain remains active and has been identified as a potential threat to user security. No specific brand impersonation has been confirmed, but the domain's activity is being closely monitored.

Infrastructure analysis reveals that allthingslemon.pages.dev resolves to the IP address 172.66.47.100, which is located in California and is managed by Cloudflare, Inc. The domain was registered through Cloudflare, Inc. on April 30, 2026. The SSL certificate is issued by Google Trust Services, which may lend a false sense of security to unsuspecting users. Despite the lack of detection by antivirus vendors, the domain has been flagged by one security blocklist, indicating a moderate level of suspicion. Notably, VirusTotal reports 0 out of 95 detections, suggesting that the domain has not yet been widely recognized as malicious.

The current status of allthingslemon.pages.dev is active, and users are advised to exercise caution when visiting the site. Organizations and individuals should consider blocking this domain through their network security solutions to prevent potential credential theft. Additionally, it is recommended to monitor user accounts for any unauthorized access or suspicious activity and to educate users about the signs of phishing attacks and the importance of verifying website authenticity.