# trazwer.pages.dev — SUSPICIOUS

> Trazwer.pages.dev impersonates a legitimate service to steal login credentials. Hosted on Cloudflare, it has 0/95 VirusTotal detections.

## Summary
Trazwer.pages.dev is an active phishing domain designed to impersonate a legitimate service and harvest user credentials. This domain poses a significant risk by tricking victims into entering sensitive login details on a fake interface, which are then captured by attackers. The threat is particularly dangerous due to its use of Cloudflare’s infrastructure, which can bypass traditional security filters, and its deployment on a subdomain of pages.dev, a legitimate Cloudflare Pages domain, making it appear more credible at first glance.  PhishDestroy identifies this domain as a high-priority threat due to its current active status and minimal detection footprint. The domain resolves to IP address 188.114.96.3 and is registered through Cloudflare, Inc., with an SSL certificate issued by Google Trust Services, adding a veneer of legitimacy. Notably, it currently has 0 detections out of 95 VirusTotal scans, meaning it evades most antivirus and security tools. While additional blocklist data is still under investigation, the combination of Cloudflare hosting, a trusted SSL certificate, and undetected status makes this campaign particularly stealthy and effective.  If you have visited trazwer.pages.dev, assume your credentials or personal data may have been compromised. Immediately change passwords for any accounts where you may have entered login details on this site. Enable multi-factor authentication on all critical accounts to prevent unauthorized access. Use a reputable password manager to detect and block fake login pages in the future. Report this domain to your IT security team or through your organization’s phishing reporting channels. Monitor financial and personal accounts closely for signs of fraud or unauthorized activity.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/89689c1c-6bf0-4b86-849e-556fc4e02f8c
- PhishDestroy: https://phishdestroy.io/domain/trazwer.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/trazwer.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/trazwer.pages.dev/
Last updated: 2026-03-24