search-trzr-suit[.]pages[.]dev

PhishDestroy identifies search-trzr-suit.pages.dev as an active generic phishing domain impersonating a cloud trust or suite environment. The page is hosted under Google Pages (pages.dev) with a Google Trust Services SSL certificate, suggesting an attempted masquerade of legitimate Google cloud infrastructure. No specific drainer kit signature is currently linked to this domain, but the generic phishing approach indicates credential harvesting or session token theft is likely the end goal.

Technical indicators for this threat include: 8 out of 95 VirusTotal detections (as of seed 792626), Cloudflare as registrar, and a static resolution to IP 172.66.44.200. The SSL certificate issued by Google Trust Services lends superficial legitimacy, but the domain name lacks any formal registration or recognizable brand association beyond a generic 'suit' or 'trust' theme. No additional blocklist counts or creation timestamps are available at this stage, though the domain remains under active investigation.

The domain is currently active and flagged under investigation with a status of 'active' as of the latest scan. PhishDestroy has flagged this domain and recommends immediate blocking of IP 172.66.44.200 and domain search-trzr-suit.pages.dev at network and endpoint levels. Users should avoid interaction and report any observed activity. Remaining risk is moderate due to low detection rates and active hosting, necessitating continued monitoring and proactive blocking.