Security Is Hard, Y'all

A security researcher details a potential phishing attempt involving a suspicious Cloudflare-branded domain. The author highlights the dangers of top-level domains like .pay and the lack of clear reporting mechanisms for suspicious authorization requests.