secure-trezo-ai[.]zapier[.]app

Analysis as of July 29, 2026 indicates that the domain secure-trezo-ai.zapier.app is actively used for credential phishing. The domain was registered through Name.com, Inc. on September 20, 2022 and remains live. VirusTotal reports that 18 of 91 security vendors have flagged the domain, demonstrating a significant level of detection across multiple scanning engines.

The domain is listed on a single security blocklist and is explicitly blocked by the PhishDestroy filtering service, confirming its inclusion in threat intelligence feeds. The current risk assessment is elevated, reflecting the potential for credential harvest attempts against unsuspecting users. No additional public data on hosting IP, SSL certificate details, HTTP response codes, or page title is available at this time, limiting deeper technical insight into the underlying infrastructure.

Defenders should prioritize adding secure-trezo-ai.zapier.app to DNS blocklists and proxy deny lists, enforce strict email filtering for URLs referencing this host, and monitor for any outbound connections to the domain. Continuous re‑evaluation is recommended, as further indicators such as hosting location or SSL fingerprint may emerge in future scans. Organizations using Zapier or related services should be especially vigilant for credential‑stealing campaigns that may reference this domain in phishing emails or malicious redirects.