know-trzr-suite[.]pages[.]dev

The domain know-trzr-suite.pages.dev was registered on June 10, 2026 through the Cloudflare Pages service and is currently classified as an active generic phishing campaign with an elevated risk level. VirusTotal analysis shows that 13 of 91 security vendors have flagged the domain, indicating a moderate consensus of malicious behavior. The domain appears on a single external blocklist and is explicitly blocked by the PhishDestroy service, reinforcing the suspicion that it is being used for credential harvesting or related fraudulent activity.

No additional infrastructure details such as IP addresses, autonomous system numbers, or hosting locations are available in the supplied intelligence, limiting the depth of the current technical profile. The absence of publicly disclosed page titles, SSL certificate details, or HTTP response codes further constrains the observable surface, and the exact nature of the impersonated brand or login interface remains unverified. Defensive teams should prioritize immediate containment by adding the domain to DNS and URL filtering policies, especially those that reference PhishDestroy or similar threat feeds.

Continuous monitoring of outbound DNS queries for this host is advised, as is the inclusion of the domain in security information and event management (SIEM) correlation rules to detect any attempted connections. Given the recent creation date and the presence of multiple vendor detections, the threat actor is likely employing a short‑lived, high‑turnover infrastructure; therefore, periodic re‑evaluation of related indicators of compromise is recommended to capture any evolution of the campaign.