know-trzr-wllt[.]pages[.]dev

The domain know-trzr-wllt.pages.dev is currently listed as active and associated with a generic phishing threat. Infrastructure analysis shows the domain is served through Cloudflare, Inc., using the authoritative name servers gwen.ns.cloudflare.com and steven.ns.cloudflare.com. DNS resolution points to the IP address 172.66.47.166, which is part of Cloudflare’s edge network. The domain has been flagged by the PhishDestroy blocklist and appears on one additional security blocklist, indicating that at least one external sinkhole or reputation service has taken action against it.

VirusTotal reports eight out of ninety‑one scanning engines flagging the domain, providing modest but concrete detection across multiple vendors. No public Safe Browsing, Open Threat Exchange (OTX), or similar reputation checks are referenced in the supplied intelligence, so their status cannot be confirmed at this time. SSL/TLS is managed by Cloudflare, and the certificate appears valid for the *.pages.dev sub‑domain, which does not inherently confer trust for the specific host. HTTP response details, page title, and content analysis have not been disclosed, leaving the visual or functional characteristics of the landing page unverified.

Defenders should treat the domain as malicious based on the existing blocklist entries and multi‑vendor detections. Recommended mitigation steps include adding the domain and its resolving IP to URL filtering rules, updating intrusion detection signatures to capture traffic to the identified IP range, and monitoring Cloudflare‑associated traffic for any anomalous credential‑submission patterns. Continuous re‑evaluation is advised should additional intelligence, such as Safe Browsing verdicts or further vendor detections, become available.