# ai-start-trazu.pages.dev — MALICIOUS

> ai-start-trazu.pages.dev is a malicious AI offer scam site flagged by 20/95 VirusTotal vendors and Google Safe Browsing. Check the full report.

## Summary
ai-start-trazu.pages.dev has been confirmed as an active phishing site designed to impersonate legitimate AI service offers, classified under generic phishing with high-risk attributes. The domain leverages Google's Pages.dev hosting service, a common vector for fraudulent landing pages, and exploits user trust in AI-related promotions to harvest credentials or deliver malware. No specific brand or drainer kit has been identified in the initial analysis, but the threat type indicates a focus on deceptive engagement rather than direct impersonation of a known entity.

This domain resolves to IP address 172.66.45.23 and is registered through Cloudflare, Inc. VirusTotal analysis confirms a detection rate of 20 out of 95 security vendors, while Google Safe Browsing has flagged it under SOCIAL_ENGINEERING, indicating a high likelihood of fraudulent or manipulative content. The domain was created recently and remains active, with no further indicators of compromise or additional infrastructure tied to this seed 023d7d.

Current status remains active as of the latest assessment, with no definitive takedown actions recorded. Users are strongly advised to avoid interaction with this domain entirely, as the risk of credential theft or malware exposure is high. Security teams should implement blocking measures at both the DNS and network levels to mitigate potential exposure. Remaining risk is elevated due to the domain's active status and the use of reputable hosting services, which may delay detection or remediation efforts.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.45.23

## Detection Status
- VirusTotal: 20 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b8267023-ed81-4bca-8c04-24e2b4ec3109
- PhishDestroy: https://phishdestroy.io/domain/ai-start-trazu.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ai-start-trazu.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ai-start-trazu.pages.dev/
Last updated: 2026-03-24