hazepeyser[.]pages[.]dev

This domain, hazepeyser.pages.dev, is identified as a phishing site specifically targeting users of the video game THE FIRST DESCENDANT. The site mimics the official game portal to harvest login credentials, payment details, or other sensitive user information. As of the latest assessment, the domain remains active and operational, posing an ongoing threat to unsuspecting players seeking access to game-related content or services. Infrastructure analysis reveals the domain is hosted on Cloudflare Pages, a legitimate static site hosting service often exploited for phishing due to its free SSL certificates and reputable infrastructure. The site resolves to the IP address 188.114.97.3, registered under Cloudflare, Inc. in Canada. The SSL certificate is issued by Google Trust Services (WE1), adding a layer of apparent legitimacy. Despite its active status, the domain has not yet been widely flagged, with 0 detections out of 95 security vendors on VirusTotal. However, it appears on one security blocklist, specifically PhishDestroy, indicating preliminary detection of malicious intent. The domain was registered on March 25, 2026, suggesting recent deployment as part of this phishing campaign. Current risk assessment indicates a moderate to high threat level due to the domain's active status, targeted impersonation of a popular gaming brand, and use of reputable hosting services to evade detection. Users are advised to avoid interacting with the site and to verify the authenticity of any game-related portals through official channels. Organizations should consider adding hazepeyser.pages.dev and its resolving IP (188.114.97.3) to network blocklists to prevent access. Security teams are encouraged to monitor for additional indicators of compromise, such as related domains or IPs, and to report the site to hosting providers and threat intelligence platforms for takedown.