trezo-d82[.]pages[.]dev

The domain trezo-d82.pages.dev was registered on April 20, 2026 through Cloudflare, Inc. and resolves to IP 172.66.44.213, a Cloudflare edge node located in Canada. DNS is served by rommy.ns.cloudflare.com and val.ns.cloudflare.com. The site presents an HTTP 200 response, enforces HSTS, and supports HTTP/3, indicating a modern web stack. The SSL certificate is issued by Google Trust Services under the WE1 identifier, confirming a valid TLS configuration. The page title observed is "Hardware Wallets Suites," and the listed scam type is brand impersonation targeting the Sui brand. Reputation services assign a Gridinsoft score of 0/100 and a Scamadviser score of 21/100, reflecting a highly untrusted profile. VirusTotal analysis shows that 10 of 94 security vendors flag the domain, and it appears on one public blocklist. PhishDestroy has already blocked the domain. Current status is active, and the threat level is classified as high. While the exact content beyond the title has not been examined, the convergence of low trust scores, multiple vendor detections, and active blocking indicates a malicious infrastructure designed to deceive users seeking Sui-related hardware wallet services. Defenders should add trezo-d82.pages.dev to network and endpoint blocklists, monitor DNS queries for the associated Cloudflare nameservers, and enforce URL filtering to prevent user access. Continuous re‑evaluation is advised as additional telemetry becomes available.