# en-trrezzr.pages.dev — SUSPICIOUS

> PhishDestroy flags en-trrezzr.pages.dev for fake giveaway scam distributing drainer kit. VT 0/95 detections. Check the full report.

## Summary
PhishDestroy identifies the domain en-trrezzr.pages.dev as an active fake-giveaway phishing page designed to harvest cryptocurrency and credentials via a drainer kit hosted on Cloudflare Pages.

Technical indicators confirm this threat: the domain resolves to 188.114.96.3, carries a Google Trust Services SSL certificate, and remains undetected on VirusTotal with 0/95 engines flagging it. The page was registered through Cloudflare, Inc. and continues to operate despite zero blocklist detections.

This domain is currently under investigation and remains active, indicating an ongoing risk of victimization. Users are advised to avoid interaction and report any encounters immediately. The residual risk remains medium due to unflagged status and legitimate infrastructure (Cloudflare + Google TLS), complicating takedown and detection efforts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2afd1501-6b2b-453b-8f33-29dfbdbc5c91
- PhishDestroy: https://phishdestroy.io/domain/en-trrezzr.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/en-trrezzr.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/en-trrezzr.pages.dev/
Last updated: 2026-03-24