home-us-trezrio[.]pages[.]dev

Analysis of home-us-trezrio.pages.dev shows that the domain was registered through Cloudflare on 21 February 2026 and resolves to the Cloudflare edge address 172.66.46.220, located in the United States under AS13335. The site presents the page title “Suspected phishing site | Cloudflare” and serves an SSL certificate issued by Google Trust Services (WE1). Network fingerprints indicate the use of HTTP/3 and mandatory HSTS, and the HTTP response currently returned is 403, consistent with the domain being taken offline. Reputation data is uniformly negative: Gridinsoft assigns a trust score of 0 out of 100, PhishDestroy lists the domain as blocked, and it appears on one external blocklist.

VirusTotal reports that six of ninety‑three scanning engines flag the domain, confirming malicious intent despite the low detection ratio. The identified scam type is credential phishing, and the infrastructure is fully hosted on Cloudflare’s CDN, with the authoritative nameservers tate.ns.cloudflare.com and lana.ns.cloudflare.com. No additional intelligence such as Safe Browsing, OTX, or brand‑specific targeting is available.

Defenders should immediately add the domain to inbound and outbound filtering rules, monitor for any resurrection attempts, and consider extending blocks to the associated IP range and Cloudflare nameservers. Continuous visibility on DNS queries and TLS handshakes is advised, as the hosting provider can be leveraged for other malicious campaigns. Given the recent creation date, low trust score, and multiple vendor detections, the risk posture remains elevated until the domain is confirmed clean, which is unlikely based on current evidence.