bowyensr-3927ckoidz-conarjt[.]pages[.]dev

This domain is flagged as an elevated-risk credential harvesting site targeting user authentication data. Analysis indicates a generic phishing threat designed to capture login credentials through fraudulent input forms or cloned interfaces. Infrastructure analysis reveals the domain was registered on March 31, 2026, through Cloudflare, Inc., and resolves to IP 188.114.97.3 (Canada). Security vendors on VirusTotal detected malicious activity in 17 out of 95 scans. The domain appears on two security blocklists (PhishDestroy, PhishingDB) and is currently offline. The SSL certificate is issued by Google Trust Services (WE1), and the page title reads 'Suspected phishing site | Cloudflare.' To mitigate exposure, network administrators should block the domain and IP 188.114.97.3 at perimeter defenses. End users should verify SSL certificates before entering credentials and report suspicious login pages to security teams. If credentials were entered on this domain, reset passwords immediately and enable multi-factor authentication on affected accounts. Monitor for unauthorized access attempts linked to this phishing campaign.