ladzer-live-home[.]pages[.]dev

This domain, ladzer-live-home.pages.dev, is identified as a generic phishing infrastructure designed to harvest user credentials. Analysis indicates no direct association with a specific brand or drainer kit, though the use of a Cloudflare Pages subdomain suggests opportunistic deployment rather than targeted impersonation. The domain exhibits characteristics typical of low-sophistication phishing campaigns, likely leveraging social engineering to deceive victims into submitting sensitive information. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 172.66.44.131, which is part of Cloudflare’s network. It was registered through Cloudflare, Inc., with a creation date of April 08, 2026, though this future date may indicate falsified registration metadata or a placeholder. The SSL certificate is issued by Google Trust Services, providing encrypted connections that lend a false sense of legitimacy. Detection metrics show 1 out of 95 security vendors on VirusTotal flagging the domain as malicious, while it appears on a single security blocklist. Google Safe Browsing status is not explicitly provided but is likely marked as deceptive given the context. At present, the domain has been taken offline, reducing immediate risk to end users. Cloudflare’s automated systems appear to have intervened, as indicated by the page title 'Suspected phishing site | Cloudflare.' However, residual risk remains due to the potential for infrastructure reuse or migration to new subdomains under the same registrar. Users who may have interacted with this domain should immediately revoke any submitted credentials, enable multi-factor authentication on associated accounts, and monitor for unauthorized access. Organizations should update blocklists to include this domain and its resolved IP to prevent future exposure.