trezur-sta[.]pages[.]dev

The domain trezur-sta.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and resolves to the Cloudflare‑owned address 172.66.44.220, which belongs to ASN 13335 (Cloudflare, Inc.) and is geolocated in the United States. The domain is served over HTTPS using a Google Trust Services / WE1 certificate, and the presence of HSTS and HTTP/3 indicates modern security features typical of Cloudflare‑hosted sites. The site returns an HTTP 403 status code, which aligns with the Cloudflare “Suspected phishing site” page title observed during the scan. Gridinsoft assigned a trust score of 0 out of 100, reflecting an extremely poor reputation.

The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy. VirusTotal analysis shows that one of ninety‑three security vendors flagged the domain, suggesting at least one independent detection of malicious behavior. Nameservers abby.ns.cloudflare.com and quentin.ns.cloudflare.com are standard Cloudflare delegations.

No additional evidence regarding the page content, target brand, or phishing kit was captured; the page title is the only textual indicator of malicious intent. Defenders should treat trezur-sta.pages.dev as a confirmed credential‑phishing infrastructure and block it at network perimeter, DNS, and proxy layers. Continuous monitoring of Cloudflare‑associated IP ranges for similar newly created domains is advised, and security teams should update threat‑intel feeds to include this indicator of compromise.