faqs-public-trzors[.]me-page[.]com

The domain faqs-public-trzors.me-page.com was registered on February 21, 2026 through GoDaddy.com, LLC and is currently active. Its authoritative name servers are simone.ns.cloudflare.com and sri.ns.cloudflare.com, indicating the use of a third‑party DNS provider. The domain is classified as a generic phishing threat and carries a high risk rating. The page title observed during analysis is "me-page.com | 525: SSL handshake failed," which suggests the site is experiencing TLS negotiation issues.

Infrastructure analysis reveals that the domain resolves to IP address 104.21.70.73, hosted within the Cloudflare network (AS13335). The hosting environment supports HTTP/3 and presents a SSL certificate issued by Google Trust Services under the label WE1. The HTTP response code 525 confirms that the SSL handshake failed, which may be a deliberate misconfiguration to impede automated verification or a symptom of an unstable backend service.

Reputation data shows a Gridinsoft trust score of 0 out of 100, reflecting a lack of trust in the domain's legitimacy. VirusTotal reports that 2 of 95 security vendors flagged the domain, and it appears on a single security blocklist. PhishDestroy has already added the domain to its blocklist, reinforcing the consensus that the domain is malicious. Despite these indicators, the limited number of vendor detections suggests that broader scanning platforms have not yet fully catalogued the threat.

Defenders should prioritize immediate containment of traffic to and from 104.21.70.73, including network‑level blocking of the IP address and domain name. Continuous monitoring of DNS queries for the associated Cloudflare name servers is advised, as the infrastructure could be leveraged for additional malicious payloads. Given the absence of detailed content analysis, further inspection of the site’s payload, redirects, and potential credential‑harvesting mechanisms is recommended to fully assess the impact and to inform remediation strategies.