# trzor-hub.pages.dev — SUSPICIOUS

> trzor-hub.pages.dev is a cryptocurrency wallet phishing site hosted on Cloudflare, flagged with 0/95 VirusTotal detections.

## Summary
PhishDestroy identifies trzor-hub.pages.dev as an active cryptocurrency wallet phishing domain designed to deceive users into submitting sensitive credentials or wallet information. The site mimics legitimate cryptocurrency platforms, leveraging Cloudflare's infrastructure to evade detection while exploiting Google Trust Services' SSL certificate to appear legitimate. Security researchers have flagged this domain as part of a broader campaign targeting unsuspecting users in the cryptocurrency space.  This domain was flagged with 0/95 detections on VirusTotal, indicating it remains under the radar despite active phishing activity. Registered through Cloudflare, Inc., it resolves to IP 188.114.96.3, a known hosting provider often abused for malicious campaigns. The site's use of Google Trust Services' SSL certificate adds a false sense of security, making it critical for users to verify domains before interacting with them. Blocklists have not yet flagged this domain, further emphasizing the need for proactive measures.  Users who have visited trzor-hub.pages.dev should immediately check their cryptocurrency wallets for unauthorized transactions and revoke any permissions granted to suspicious domains. Avoid entering any credentials or wallet details on this site, and consider using a hardware wallet or verified official platforms for transactions. Report the domain to your browser's security team or phishing databases like PhishDestroy to help mitigate further risks. If you suspect compromise, rotate passwords and enable two-factor authentication where possible to secure your accounts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/e9d9cb78-4489-4e69-a549-8a197195f87f
- PhishDestroy: https://phishdestroy.io/domain/trzor-hub.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/trzor-hub.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/trzor-hub.pages.dev/
Last updated: 2026-03-24