triezr-suite[.]pages[.]dev

PhishDestroy identifies triezr-suite.pages.dev as an active credential harvesting phishing site.

This domain is currently under investigation for credential harvesting activities aimed at stealing user login credentials. The site operates under Cloudflare’s Pages.dev platform, resolving to IP 188.114.97.3, and holds a valid SSL certificate issued by Google Trust Services. Despite its recent registration through Cloudflare, Inc., the domain remains unflagged by VirusTotal vendors, with 0 detections out of 95 scans conducted. No known brand impersonation has been confirmed at this time, but the domain’s structure and infrastructure align with common phishing tactics.

The domain’s technical indicators reveal several red flags: it hosts no legitimate content, operates with a recently assigned IP (188.114.97.3), and leverages Cloudflare’s Pages.dev service, which is frequently exploited for phishing campaigns due to its legitimate appearance. The SSL certificate from Google Trust Services adds a veneer of legitimacy, potentially deceiving users into trusting the site. Notably, the domain’s low trust score and absence of blocklist entries suggest it is a recent addition to the threat landscape, though its operational status remains active and under scrutiny.

As of the latest assessment, triezr-suite.pages.dev continues to host credential harvesting content, posing a direct risk to unsuspecting users. PhishDestroy advises immediate blacklisting of this domain and IP (188.114.97.3) in organizational security tools. Users should avoid interacting with the site and report any suspicious activity to their security teams. Additionally, organizations are urged to reinforce user awareness training to recognize phishing tactics, particularly those leveraging legitimate cloud services like Pages.dev. Continuous monitoring of this domain is recommended due to its evolving threat potential.