home-logen-treezio[.]pages[.]dev

PhishDestroy identifies home-logen-treezio.pages.dev as an active credential harvesting domain currently posing an elevated risk to unwary users. This domain is not a generic phishing site but specifically designed to trick victims into surrendering login credentials under false pretenses. The page remains accessible as of the latest scan, indicating ongoing malicious operations.

This domain was flagged by 1 of 95 VirusTotal security vendors, indicating limited but confirmed malicious activity. It resolves to IP address 172.66.44.148 and is registered through Cloudflare, Inc., which provides anonymity and protection to malicious actors. The SSL certificate issued by Google Trust Services lends false legitimacy to the domain, while the single VirusTotal detection suggests this threat may be newly emerged or using evasion techniques to bypass initial screening. No additional blocklist counts were provided in the available intelligence.

Users are strongly advised to avoid interacting with home-logen-treezio.pages.dev and to report any accidental exposure of credentials immediately. Security teams should block this domain at the network level using IP 172.66.44.148 and domain home-logen-treezio.pages.dev. If credentials were entered, users must rotate passwords immediately, enable multi-factor authentication where possible, and monitor for signs of account takeover. This domain represents an elevated risk due to its current active status and the use of Cloudflare infrastructure to obscure malicious intent.