sharezbjkb[.]pages[.]dev

This domain, sharezbjkb.pages.dev, is identified as an active phishing infrastructure designed to harvest user credentials through deceptive login portals. Analysis indicates the site operates under a generic phishing threat type, with no confirmed brand impersonation at this stage, though credential theft remains the primary objective. The domain remains operational, posing an elevated risk to users who may encounter it through malicious links or redirects. Infrastructure analysis reveals the domain is registered through Cloudflare, Inc., with a creation date of October 16, 2025. It resolves to the IP address 172.66.47.12, associated with Cloudflare’s US-based network (AS13335). The absence of an SSL certificate further reduces legitimacy, while security vendors on VirusTotal have flagged the domain as malicious, with 15 out of 95 engines detecting it as phishing-related. The domain appears on two security blocklists, including PhishDestroy and PhishingDB, and is currently blocked by these sources. The page title, 'Suspected phishing site | Cloudflare,' suggests Cloudflare’s own systems have preliminarily classified the content as suspicious. Current risk assessment categorizes this domain as active and capable of deploying phishing campaigns. Users and organizations are advised to implement immediate mitigations, including blocking the domain and its resolving IP at the network perimeter. Security teams should monitor for indicators of compromise, such as unexpected login attempts or unauthorized access, particularly from endpoints that may have interacted with the domain. Given the domain’s recent registration and Cloudflare hosting, continuous monitoring for related subdomains or newly created infrastructure is recommended to preempt further abuse.