space-io-trezo[.]pages[.]dev

On 25 July 2026 analysis indicates that the domain space-io-trezo.pages.dev is currently offline but exhibits characteristics of a credential phishing infrastructure. The domain resolves to IP 188.114.96.3, which belongs to Cloudflare’s AS13335 network in the United States. Authoritative name servers are salvador.ns.cloudflare.com and raina.ns.cloudflare.com, confirming hosting on Cloudflare’s platform. The SSL certificate is issued by Google Trust Services under the WE1 root, and the site presents HSTS and HTTP/3 support. An HTTP 403 response is returned, and the page title displayed by the server reads "Suspected phishing site | Cloudflare", indicating that Cloudflare has flagged the host as malicious.

VirusTotal has recorded ten detections out of ninety‑three scanned engines, and the domain appears on one external blocklist. PhishDestroy has also blocked the host, and Gridinsoft assigns a trust score of 0 / 100. The domain was created on 21 February 2026 and registered through Cloudflare, Inc., with no additional registrant details disclosed. Defenders should treat any communications originating from this domain as malicious. Network sensors should block outbound connections to 188.114.96.3 and to the domain name itself.

Email security gateways should add the domain to phishing and malware blocklists. Because the site is hosted behind Cloudflare, sink‑hole or DNS‑based mitigation may be required to intercept traffic before it reaches the Cloudflare edge. Continuous monitoring of the IP range associated with AS13335 is advised, as the attacker may repurpose other Cloudflare‑assigned addresses. At present, no further forensic artifacts such as payload hashes or landing‑page screenshots are available, so the precise phishing kit remains unknown. Organizations should remain vigilant for credential‑phishing attempts that reference this domain and apply standard credential‑theft detection rules.