register-renzoprotocol[.]pages[.]dev

This domain, register-renzoprotocol.pages.dev, poses a high-risk brand impersonation threat specifically targeting Discord users. The site mimics legitimate Renzo protocol pages to deceive visitors into disclosing credentials, installing malicious software, or authorizing fraudulent transactions. The impersonation focuses on Discord-related interactions, likely exploiting trust in community-driven platforms to facilitate account takeovers or financial theft.

Analysis indicates the domain was registered on February 21, 2026, through Cloudflare, Inc., and resolves to the IP address 172.66.45.28, hosted on Cloudflare's infrastructure (AS13335). It appears on 5 security blocklists and is flagged by 15 out of 95 security vendors on VirusTotal. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the malicious intent, as the domain is actively blocked by multiple security layers, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. Google Safe Browsing further classifies this domain as phishing.

Users who visited register-renzoprotocol.pages.dev should immediately revoke any active sessions linked to Discord or associated services. Reset passwords using a secure device and enable multi-factor authentication if not already active. Scan the device for malware, particularly browser extensions or applications installed after visiting the domain. Monitor financial accounts and Discord activity for unauthorized access or transactions. Report the incident to Discord's security team and consider notifying relevant authorities if sensitive data was compromised.