io-trezio-strt[.]pages[.]dev

This domain, io-trezio-strt.pages.dev, is confirmed to facilitate credential theft operations targeting users through deceptive login interfaces. Analysis indicates the site mimics legitimate authentication portals to harvest usernames, passwords, and session tokens, likely for subsequent unauthorized access to accounts or financial exploitation. The infrastructure is designed to evade initial detection while maintaining persistence for short-term campaigns. Technical evidence supports the classification of this domain as malicious. Despite zero detections on VirusTotal (0/95 engines), it appears on one security blocklist, suggesting prior identification by automated or manual analysis. The domain is registered through Cloudflare, Inc., with an SSL certificate issued by Google Trust Services, a common tactic to lend false legitimacy. It resolves to the IP address 172.66.44.123 and was created on April 03, 2026, indicating a recently deployed threat vector. The page title, 'Suspected phishing site | Cloudflare,' further corroborates its malicious intent, as it aligns with Cloudflare's default warning for flagged content. Users who visited io-trezio-strt.pages.dev or entered credentials on the site should immediately take remedial actions. Reset passwords for any accounts accessed during the exposure window, prioritizing email, financial, and work-related platforms. Enable multi-factor authentication (MFA) where available to mitigate unauthorized access risks. Monitor linked accounts for suspicious activity, such as unauthorized logins or transactions, and report anomalies to the respective service providers. If session tokens or cookies were exposed, log out of all active sessions and clear browser data to invalidate stolen credentials. Consider scanning the device for malware, as phishing sites may deploy additional payloads.