en-suties-io[.]pages[.]dev

This domain, en-suties-io.pages.dev, is currently under investigation for hosting generic phishing content designed to deceive users into disclosing sensitive information or executing unauthorized transactions. The site was operational until recently, presenting itself with a page title indicating suspicion of phishing activity, as flagged by automated security systems. While the exact nature of the phishing scheme—whether credential harvesting, cryptocurrency draining, or brand impersonation—remains unconfirmed, the presence of such a title suggests malicious intent targeting unsuspecting visitors. Analysis indicates the domain was registered on April 3, 2026, through Cloudflare, Inc., a registrar commonly used for both legitimate and malicious infrastructure. The domain resolves to the IP address 188.114.96.3, associated with Cloudflare’s content delivery network. Despite its suspicious characteristics, the domain has not yet been widely detected, with only 0 out of 95 security engines on VirusTotal flagging it as malicious. However, it appears on at least one security blocklist, and its trust score from Gridinsoft is 0 out of 100, reinforcing concerns about its legitimacy. The SSL certificate is issued by Google Trust Services, which, while not inherently indicative of malicious activity, is frequently leveraged by phishing sites to appear legitimate. Users who may have visited en-suties-io.pages.dev are advised to take immediate action to mitigate potential risks. If any credentials, financial details, or personal information were entered on the site, those details should be considered compromised and changed immediately across all platforms where they were reused. Affected individuals should monitor their accounts for unauthorized transactions or suspicious activity and enable multi-factor authentication where available. Devices used to access the site should undergo a thorough scan using updated security tools to detect any potential malware or backdoors. Given the domain’s recent takedown, users are also encouraged to report the incident to relevant security teams or platforms to aid in broader threat intelligence efforts.