ai-start-trazu[.]pages[.]dev

This domain, ai-start-trazu.pages.dev, is confirmed to operate as a phishing portal targeting users through deceptive login interfaces. Analysis indicates the site likely employs credential harvesting techniques, potentially masquerading as a legitimate service to capture sensitive authentication details. No direct evidence of a cryptocurrency drainer kit was observed, though the infrastructure aligns with broader credential-theft campaigns. The domain exhibits no overt brand impersonation, suggesting a generic but high-volume phishing approach. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on March 24, 2026, with resolution to the IP address 172.66.45.23, geolocated to Canada under Cloudflare’s network. Detection metrics show 20 out of 95 security vendors on VirusTotal flagging the domain as malicious, while Google Safe Browsing explicitly designates it as a phishing threat. The domain appears on one additional security blocklist, and its SSL certificate is issued by Google Trust Services (WE1), a common characteristic of abused content delivery networks. As of the latest assessment, ai-start-trazu.pages.dev has been taken offline, with Cloudflare displaying a ‘Suspected phishing site’ interstitial page. Despite its inactive status, residual risk persists due to the domain’s recent registration and prior malicious activity. Users are advised to treat any prior interactions with the domain as compromised and to monitor for unauthorized access attempts. Organizations should update blocklists to include this domain and its associated IP to prevent potential re-emergence or lateral movement within networks.