com-leazore[.]pages[.]dev

This domain, com-leazore.pages.dev, is flagged as a credential harvesting phishing site targeting unsuspecting users through deceptive login interfaces. Analysis indicates the absence of a specific brand impersonation or known drainer kit signatures, suggesting a generic but potentially scalable phishing operation. The page title, 'Suspected phishing site | Cloudflare,' further supports the likelihood of malicious intent, though no direct payload or exfiltration endpoint has been confirmed at this stage. Infrastructure analysis reveals the domain was registered on April 03, 2026, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. VirusTotal reports 0 detections out of 95 engines, indicating the domain has not yet been widely flagged by security vendors. However, it appears on at least one security blocklist, and its SSL certificate is issued by Google Trust Services. The domain's hosting provider and registrar alignment with Cloudflare infrastructure may have facilitated rapid deployment and evasion of initial detection mechanisms. Currently, the domain is offline, likely due to takedown actions initiated by security blocklists or hosting provider intervention. While no active threat is present, the domain's recent creation date and prior blocklist inclusion warrant continued monitoring. Organizations are advised to update their web filtering rules to include this domain and its associated IP address, and users should be alerted to the risks of credential submission on unverified login portals. The lack of prior detections underscores the need for proactive threat intelligence integration to mitigate similar emerging threats.