trzor-strt-eng[.]pages[.]dev

The domain trzor-strt-eng.pages.dev was registered via Cloudflare Pages and first observed on June 10 2026. VirusTotal analysis shows that 12 of 91 security scanners have flagged the domain as malicious, indicating a non-trivial detection rate across independent engines. The same indicator is listed by PhishDestroy as blocked, and it appears on an additional public security blocklist, raising confidence that the domain is being used for malicious purposes.

No public IP address or autonomous system information is disclosed in the available data, but the use of Cloudflare's edge network is consistent with a strategy to hide origin infrastructure. The current threat classification is generic phishing, which aligns with the detection patterns reported by the scanning vendors. Because the domain is freshly created and already cited by multiple sources, defenders should treat any traffic to the host as suspicious and enforce outbound filtering or DNS sinkholing.

Organizations are advised to add the FQDN to internal blocklists, monitor for any authentication attempts that resolve to the domain, and employ sandbox analysis on any payloads that may be delivered from the site. At this time, no further technical details such as SSL certificate properties, HTTP response codes, or page titles have been published, leaving the full scope of the phishing campaign uncertain. Continuous monitoring of reputation feeds and periodic re-scans are recommended to capture any evolution of the indicator.