info-tre-zr-suite[.]pages[.]dev

The domain info-tre-zr-suite.pages.dev was registered through Cloudflare, Inc. and uses the Cloudflare nameservers chip.ns.cloudflare.com and elsa.ns.cloudflare.com. DNS resolution maps the domain to the IPv4 address 172.66.44.224, an IP space commonly associated with Cloudflare’s reverse‑proxy service. The domain is currently listed on one public security blocklist and has been explicitly blocked by the PhishDestroy feed.

VirusTotal records indicate that the domain has been scanned by 91 antivirus and URL‑reputation engines; none of the scanners reported a detection at the time of the scan, although the absence of a detection does not constitute a safety guarantee. The investigative status is marked as active, and the threat type is classified as generic phishing, with the unique seed identifier 903b6c linking this observation to internal tracking. No additional metadata such as SSL certificate details, HTTP response codes, page titles, or external intelligence from OTX or Safe Browsing is presently available.

Consequently, the observable evidence is limited to registration metadata, IP resolution, blocklist presence, and the VirusTotal scan count. Defenders should proactively block the domain at the DNS or firewall level, incorporate the IP address 172.66.44.224 into threat‑intel feeds, and continue monitoring for any changes in detection status or new intelligence from additional scanners. Ongoing analysis is required to determine whether the domain hosts malicious payloads or credential‑harvesting pages, and to assess any potential affiliation with broader phishing campaigns.