new-praxitor-site[.]pages[.]dev

This domain, new-praxitor-site.pages.dev, is under investigation for credential phishing activity targeting users of a naming or branding service. Registered on March 30, 2026, through Cloudflare, the domain resolves to 188.114.97.3, a Cloudflare-hosted IP in Canada. Infrastructure analysis reveals Cloudflare nameservers (chip.ns.cloudflare.com, piper.ns.cloudflare.com) and technologies including HSTS and HTTP/3, consistent with modern phishing deployments. The page title, 'Praxitor - Premium Naming,' suggests impersonation of a legitimate naming or branding platform, though the exact content and targeting methods remain unconfirmed due to limited analysis of the site itself. As of July 12, 2026, the domain returns an HTTP 200 status and is flagged on one security blocklist (PhishDestroy). No detections were reported by 94 vendors in a recent scan, though this absence does not confirm safety. The domain's registration age (under four months) and Cloudflare hosting are typical of short-lived phishing campaigns. Defenders should treat this domain as high-risk for credential harvesting, particularly in contexts involving branding, naming services, or corporate identity tools. Blocking or monitoring access to this domain is recommended until further analysis confirms its legitimacy or threat status. Additional scrutiny of related subdomains or similar naming patterns under the pages.dev zone may reveal connected infrastructure.