pages-trzrsu-eus[.]pages[.]dev

Analysis of pages-trzrsu-eus.pages.dev as of July 29 2026 shows that the domain is actively leveraged in a generic phishing campaign targeting credential collection. The domain is registered through Cloudflare, Inc., and its authoritative name servers are clarissa.ns.cloudflare.com and yisroel.ns.cloudflare.com, indicating continued use of Cloudflare’s DNS infrastructure. DNS resolution points to the IPv4 address 188.114.96.3, a Cloudflare edge node that provides the web service for the domain.

VirusTotal has recorded eight positive detections out of ninety‑one submitted scanners, confirming that multiple independent security engines have identified malicious behavior associated with the host. The domain appears on a single external security blocklist and has been explicitly blocked by the PhishDestroy mitigation platform, demonstrating that at least one dedicated anti‑phishing service has taken protective action. No additional public intelligence such as Safe Browsing verdicts, SSL certificate details, or HTTP response codes is presently available, leaving the full scope of the hosted content unverified.

Defenders should consider adding 188.114.96.3 and the domain name to local deny lists, enforce DNS‑level blocking of the two Cloudflare name servers for this host, and monitor traffic for attempts to contact the domain. Continuous re‑evaluation is advised, as further analysis may reveal additional indicators of compromise or expanded targeting.