trezosuite-io[.]pages[.]dev

The domain trezosuite-io.pages.dev was created on February 21, 2026 and is registered through Cloudflare, Inc. It resolves to the IP address 172.66.44.197, which is owned by AS13335 Cloudflare, Inc. and geolocated to the United States. The site presents the page title "Suspected phishing site | Cloudflare" and the SSL certificate is issued by Google Trust Services under the WE1 designation, indicating a valid TLS termination on Cloudflare’s network. Technical analysis shows the domain enforces HSTS, supports HTTP/3, and returns an HTTP 403 status code, suggesting access restrictions or a takedown response.

Reputation data records a Gridinsoft trust score of 0 out of 100, reflecting a highly untrusted classification. The domain appears on a single security blocklist and is specifically listed by PhishDestroy as a malicious host. VirusTotal analysis reveals that 10 of 93 scanned security vendors flagged the domain as malicious, providing corroborating evidence of its threat nature.

The brand target is identified as Sui, and the campaign is categorized as brand impersonation, aligning with the observed page title and the broader threat profile. Defenders should add trezosuite-io.pages.dev and its resolving IP 172.66.44.197 to blocklists, monitor for any related Cloudflare‑hosted infrastructure, and ensure that security gateways reference the observed detection counts and trust scores when evaluating traffic. Continuous observation is advised in case the domain reappears or similar impersonation attempts emerge, given the elevated risk rating and the confirmed presence on at least one blocklist.