VirusTotal
11 / 89 engine detections
보고서 열기“Suspected Phishing | Cloudflare”
Cloudflare 사칭: access-trazorbrz.pages.dev — 연결 가능 · 액세스가 제한됨 (HTTP 403). 증거 요약: VirusTotal 11/89 (BitDefender, CyRadar, ESET, Fortinet, G-Data); PhishDestroy…
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
11 / 89 engine detections
보고서 열기no community references
보고서 열기provider verdict: clean
보고서 열기No threat flag
보고서 열기Results reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.
PhishDestroy threat report
access-trazorbrz.pages.dev is an impersonation phishing page that borrows Cloudflare's name and identity to win the trust of visitors. It ran as a free subdomain on Cloudflare's own Pages platform, so the address itself carries no real-brand domain behind it. PhishDestroy first flagged it on 2026-08-09. The site has been offline since 2026-09-13, and the content was still blocked by the provider at our last check on 2026-10-19.
Brand-impersonation pages like this one mimic a trusted service's look and wording so a visitor believes they are dealing with the real company, then ask for a login, a verification step or other sensitive input. Whatever is typed into such a form goes straight to the operator, who can use it to take over accounts or resell access. The page title now reads "Suspected Phishing | Cloudflare", which matches Cloudflare's warning label rather than the original lure. We classify the site itself as a Cloudflare impersonation phishing page.
On 2026-09-13, 11 of 89 VirusTotal engines flagged the domain. BitDefender, CyRadar, ESET, Fortinet, G-Data, LevelBlue, Lionic and PhishFort were among the vendors that flagged it. That is a minority of engines, but it includes several established security vendors and a brand-protection specialist. The domain is also on the PhishDestroy blocklist.
The subdomain was created on 2026-07-29, eleven days before we detected it, a short gap typical of throwaway phishing deployments. It was hosted on Cloudflare Pages, served from Cloudflare, Inc. network space geolocated to Canada. Using the impersonated company's own free hosting gave the page a plausible address and a valid HTTPS padlock at no cost. A padlock alone therefore proves nothing about who runs a site.
If you entered a Cloudflare password or any other credentials on this page, change that password now from the official site. Change it as well on any other account where you reused it. Turn on two-factor authentication, review active sessions and sign out unfamiliar ones, and revoke or rotate any API tokens or keys you may have exposed. Defenders should block this specific pages.dev subdomain rather than the whole platform. They should also search proxy and mail logs for visits since 2026-07-29 and treat the affected users' credentials as compromised.
Edge-IP 평판은 이 도메인에 귀속되지 않습니다.
Location describes the IP network.
ee8106ab5d007ec2fc08336f089d42790d70d654d0749b281fd8511b41e7a2ecSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
알 수 없음→blocked
cloudflare_antiphishing · Cloudflare · phishing_interstitial
알 수 없음→blocked
cloudflare_antiphishing · Cloudflare · phishing_interstitial
알 수 없음→blocked
cloudflare_antiphishing · Cloudflare · phishing_interstitial
알 수 없음→blocked
cloudflare_antiphishing · Cloudflare · phishing_interstitial
알 수 없음→blocked
cloudflare_antiphishing · Cloudflare · phishing_interstitial
알 수 없음→blocked
cloudflare_antiphishing · Cloudflare · phishing_interstitial
알 수 없음→blocked
cloudflare_antiphishing · Cloudflare · phishing_interstitial
알 수 없음→blocked
cloudflare_antiphishing · Cloudflare · phishing_interstitial
알 수 없음→blocked
cloudflare_antiphishing · Cloudflare · phishing_interstitial
접속 가능→이용 불가
No threat flag
View source11/89 engine detections
View sourceaccess-trazorbrz.pages.dev
View source저장된 유사 도메인 142개
전체 142개 중 100개 표시
커뮤니티 신고 1건
범주IMPERSONATION
Brand abuse: impersonation, fake affiliation, impersonating Trezor
Compare what a browser and a crawler receive, and check for Keitaro traffic routing.
access-trazorbrz.pages.dev
Listed domains receive at least one abuse report; this entry has no retained notification history.
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
access-trazorbrz.pages.dev)비록 모든 세부 사항을 알지 못하더라도 — 어쨌든 신고를 하세요. 부분적인 정보라도 수사에 도움이 됩니다.
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.