startt-trezr-dev[.]pages[.]dev

Analysis of startt-trezr-dev.pages.dev as of July 29, 2026 indicates that the domain is actively used in a generic phishing campaign and is assigned an elevated risk rating. The domain resolves to the IP address 188.114.96.3 and is hosted behind Cloudflare, Inc., as reflected by the registrar information and the authoritative nameservers grannbo.ns.cloudflare.com and woz.ns.cloudflare.com. Public threat intelligence shows the domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed.

VirusTotal reports that ten of ninety‑one scanned security vendors flag the domain as malicious, confirming a non‑trivial detection rate. No additional telemetry such as Safe Browsing status, OTX references, SSL certificate details, HTTP response codes, or page title information is available in the current dataset, leaving the precise content and lure techniques of the site unverified. Defenders should treat the domain as hostile: network perimeter controls ought to block outbound connections to 188.114.96.3 and DNS queries for the domain, email security gateways should quarantine any messages containing URLs to this host, and endpoint detection solutions should include the domain in their indicator sets.

Continuous monitoring of the associated IP and Cloudflare nameserver entries is recommended, as the underlying hosting provider may be leveraged for additional malicious domains. Given the elevated risk classification and the existing blocklist entries, precautionary denial of service to the domain is advisable until further forensic analysis can confirm its activity.