apps-trzr-en[.]pages[.]dev

This domain, apps-trzr-en.pages.dev, was flagged as a credential phishing site targeting login credentials. Analysis indicates the domain was created on February 21, 2026, and is hosted on Cloudflare infrastructure, resolving to IP 172.66.44.250 (AS13335, US). The domain is currently offline, returning an HTTP 403 status with a Cloudflare-generated page titled 'Suspected phishing site | Cloudflare.' Eight of 93 security vendors on VirusTotal detected the domain as malicious, and it appears on at least one security blocklist (PhishDestroy). Gridinsoft assigned a trust score of 0/100, further supporting its classification as a phishing threat.

Infrastructure analysis reveals the domain uses Cloudflare nameservers (carrera.ns.cloudflare.com, mike.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1). Technologies detected include HSTS and HTTP/3, common in modern phishing campaigns leveraging Cloudflare's CDN to obscure origin servers. The scam type is explicitly identified as credential phishing, though the exact brand or service being impersonated remains unconfirmed due to the lack of visible page content or additional brand-specific indicators in the available data. Defenders should treat this domain as a confirmed phishing threat.

Block access to the domain and its resolving IP (172.66.44.250) at the network level. Monitor for related domains using the 'trzr' substring or similar patterns, particularly those hosted on Cloudflare Pages. If internal logs show user interaction with this domain, initiate credential reset procedures for affected accounts. Given the domain's current offline status, defenders should prioritize retrospective log analysis to identify potential prior exposure rather than real-time blocking.