homepage-trozr[.]zapier[.]app

PhishDestroy identifies homepage-trozr.zapier.app as an active generic phishing domain posing as a legitimate Zapier service to deliver a browser Trojan. This domain was flagged by 2 blocklists and 6/95 VirusTotal vendors, indicating partial but not universal detection. It resolves to IP 64.239.123.65 and uses a Let’s Encrypt SSL certificate, suggesting an attempt to appear trustworthy while hosting malicious content. homepage-trozr.zapier.app was registered under an unknown registrar and currently points to a malicious host with a low detection rate of 6/95 on VirusTotal. It has been blocked by PhishingArmy and OISD, two reputable blocklists, and is flagged as malicious by Google Safe Browsing. The domain’s infrastructure includes a single IP (64.239.123.65), and its SSL certificate is issued by Let’s Encrypt, which attackers frequently exploit to bypass security checks. This domain remains active as of the latest intelligence sweep. Users are advised to block homepage-trozr.zapier.app at the network and host level and inspect browser extensions for unauthorized scripts. While current blocklists and security tools provide partial coverage, the domain’s evasion tactics and low detection rate pose a persistent risk. Remain vigilant and report any suspicious browser behavior to your IT security team.