logn-trezx-eng[.]pages[.]dev

PhishDestroy identifies logn-trezx-eng.pages.dev as a generic phishing domain currently under active investigation. This site is suspected of engaging in crypto drainer activity, a high-risk threat category designed to steal cryptocurrency assets from unsuspecting users. The domain remains unblocked by standard security vendors despite ongoing scrutiny, indicating elevated risk potential for visitors.

This domain was flagged by 2 of 95 VirusTotal vendors as of the latest scan, showing minimal detection by automated security systems. It resolves to IP address 172.66.47.95, is registered through Cloudflare, Inc., and holds a valid SSL certificate issued by Google Trust Services. The domain's recent registration through Cloudflare's infrastructure raises additional concerns about evasion tactics, as threat actors frequently exploit legitimate hosting providers to obscure malicious operations.

The current status of logn-trezx-eng.pages.dev remains active under investigation, meaning active monitoring is ongoing but no definitive classification has been established. Users should exercise extreme caution when accessing this domain, as the combination of zero VirusTotal detections, Cloudflare hosting, and suspected crypto drainer activity creates a high-risk scenario. PhishDestroy recommends immediate blocking of this domain at the network level and advises against any cryptocurrency-related transactions through this site. Organizations should update their threat intelligence feeds to include this indicator and deploy DNS filtering solutions to prevent access.