# tresor-log.pages.dev — MALICIOUS

> PhishDestroy identifies tresor-log.pages.dev as a credential phishing site. 17/95 security vendors flag it. Avoid entering any information!

## Summary
PhishDestroy has flagged tresor-log.pages.dev as a high-risk generic phishing site, likely attempting to steal user credentials. The domain does not appear to impersonate a specific brand, suggesting a broad, untargeted attack. No specific drainer kit is identified in the provided data.

Technical indicators reveal that VirusTotal reports a score of 17/95 security vendors flagging this domain as malicious. The domain is registered through Cloudflare, Inc. It resolves to IP address 172.66.44.212. Google Safe Browsing has flagged the domain for "SOCIAL_ENGINEERING". The domain also appears on 1 security blocklist.

The domain is currently active and poses a significant risk to users. Immediate response actions include adding the domain to blocklists and advising users to avoid visiting the site or providing any personal information. The remaining risk is high, as the site is actively flagged as a phishing threat and could potentially harvest user credentials. Users should exercise extreme caution and report any suspicious activity related to this domain.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.212

## Detection Status
- VirusTotal: 17 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 1 hits
  Lists: ["Hagezi"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/eff75d56-8265-4a45-96c4-256c7cfc1e6b
- PhishDestroy: https://phishdestroy.io/domain/tresor-log.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/tresor-log.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/tresor-log.pages.dev/
Last updated: 2026-03-25