trezo-logon-en[.]pages[.]dev

The domain trezo-logon-en.pages.dev is currently classified as an active generic phishing site with an elevated risk rating. Observations indicate that the domain was created on September 27, 2025 and is hosted through the Cloudflare Pages service, suggesting the use of a legitimate content delivery platform to obscure malicious intent. VirusTotal analysis shows that 12 of 91 security vendors have flagged the domain, providing independent corroboration of its suspicious nature.

The domain also appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, confirming that at least one dedicated anti‑phishing platform has identified it as malicious. No additional intelligence such as target brand, page title, or SSL certificate details is available, leaving the precise content of the hosted page unverified.

Defenders should treat the domain as hostile, incorporate it into network‑level deny lists, and monitor for any outbound connections to the associated Cloudflare infrastructure. Continuous telemetry collection is advised to capture any future changes in detection counts or blocklist status, which may indicate campaign evolution or escalation.