acces-trzor-hrdware-us[.]pages[.]dev

PhishDestroy identifies acces-trzor-hrdware-us.pages.dev as an active phishing domain impersonating a hardware login portal to harvest credentials. This site leverages Cloudflare Pages hosting and a Google Trust Services SSL certificate to appear legitimate, while its single-hop IP 172.66.44.98 is hosted on Cloudflare’s infrastructure. VirusTotal currently returns 8/95 detections, indicating it remains under the radar of most antivirus engines despite its active status. This domain was flagged during routine threat-hunting using seed 6861dc and is categorized as generic_phishing with a status of active. The domain resolves via Cloudflare DNS and is served through AS13335 (Cloudflare, Inc.), a common tactic among phishing operators to evade takedowns and mask origin. Notably, the site uses a legitimate SSL certificate issued by Google Trust Services, lending false credibility to its fraudulent login forms. Users who accessed or entered credentials on this domain should immediately change passwords on all accounts using the same login details and enable multi-factor authentication. Monitor financial accounts for unauthorized transactions and consider revoking any saved session tokens linked to this site. Report the domain to your security team and file a complaint with Cloudflare’s abuse team to expedite takedown.