io-suite-trezur-cdn[.]pages[.]dev

The domain io-suite-trezur-cdn.pages.dev was registered on June 10, 2026 through Cloudflare Pages, a platform commonly used for rapid deployment of static web content. Its short lifespan—just over seven weeks before the report date of July 29, 2026—aligns with patterns observed in opportunistic phishing campaigns that rely on transient hosting to evade long‑term detection. Independent analysis on VirusTotal shows that 12 of 91 security vendors have flagged the domain, indicating a consensus among multiple scanners that the site exhibits malicious characteristics. The domain is currently listed on one security blocklist, specifically PhishDestroy, which has actively blocked traffic to it.

No additional public blocklists have been observed at the time of writing. The combination of a recent creation date, Cloudflare Pages hosting, and multiple vendor detections provides a compelling risk profile despite the limited visibility into the site’s actual content. Defenders should treat the domain as hostile: add it to DNS sinkhole or firewall deny lists, ensure that web filtering solutions reference the PhishDestroy blocklist, and monitor outbound connections for attempts to resolve or contact the domain.

Continuous re‑scanning with multi‑engine services is advised, as further analysis may reveal additional indicators such as payload URLs or credential‑stealing forms. Organizations that employ email security gateways should update phishing detection rules to include this host, and incident response teams should be prepared to investigate any user reports of suspicious login prompts referencing the domain. Until more detailed page‑level intelligence is released, the precautionary stance remains to block all communications with io-suite-trezur-cdn.pages.dev.