supp-trzr[.]pages[.]dev

This domain, supp-trzr.pages.dev, is flagged as a generic credential phishing site hosted on Cloudflare Pages infrastructure. Analysis indicates no direct brand impersonation or known drainer kit association at this stage, though the domain naming convention suggests potential targeting of support or transaction-related workflows. The infrastructure lacks overt branding but exhibits characteristics consistent with low-sophistication phishing operations designed to harvest login credentials or sensitive user data. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 188.114.97.3 and was registered through Cloudflare, Inc. on April 03, 2026. VirusTotal reports 0 detections across 95 security engines, while Gridinsoft assigns a trust score of 0/100. The domain appears on a single security blocklist and is secured with an SSL certificate issued by Google Trust Services. No detections were recorded in Google Safe Browsing at the time of assessment. The domain is currently offline, having been taken down following initial detection. While the immediate threat is mitigated, the infrastructure remains under investigation due to the anomalous creation date (future-dated) and the use of Cloudflare Pages for hosting, which may indicate an attempt to exploit legitimate content delivery networks for malicious purposes. Organizations are advised to monitor for related domains using similar naming patterns and to implement real-time URL filtering to block access to emerging threats from this actor cluster. No further distribution or payload delivery was observed prior to takedown.