This domain, leon-game-online2.com, is under investigation for being a generic phishing site as of July 28, 2026. Created on July 23, 2026, the domain is registered through Fewmoretaps OU d/b/a Trustname.com, a registrar that has been associated with various suspicious domains in the past. The domain is currently active and resolves to the IP address 188.114.96.3, which is hosted by Cloudflare. The SSL certificate is provided by Google Trust Services, which may lend a false sense of security to potential victims.
Defenders should be aware that while the domain appears on one security blocklist, it has not been flagged by any of the 91 vendors on VirusTotal, a popular threat intelligence platform. This lack of detection does not guarantee the domain's safety, as new or targeted phishing campaigns may not be widely recognized immediately. The nameservers used are leia.ns.cloudflare.com and syeef.ns.cloudflare.com, both of which are managed by Cloudflare. Given the domain's recent creation and its presence on a security blocklist, it is advisable for network administrators and security personnel to monitor traffic to this domain and consider blocking it to mitigate potential risks.
The exact content of the website has not been analyzed, and further investigation is recommended to determine the specific nature of the phishing campaign. PhishDestroy has already flagged this domain, indicating that it may pose a threat to users. Defenders should refer to the provided blocklist and other available threat intelligence resources for additional context and to implement appropriate defensive measures.