open-tz-suite[.]pages[.]dev

open-tz-suite.pages.dev is currently flagged as an active generic phishing site with an elevated risk rating. The domain was registered on October 09 2025 through Cloudflare Pages, indicating the use of Cloudflare’s serverless hosting platform. It appears on a single security blocklist and is listed as blocked by the PhishDestroy service. VirusTotal analysis shows that 10 of 91 scanned security vendors have issued a detection for the domain, confirming that multiple independent tools consider it malicious.

The limited blocklist presence suggests that the domain may be newly deployed or that its malicious activity has not yet been widely observed. No additional intelligence such as ASN, hosting IP, SSL certificate details, or page title has been disclosed, and the exact login or credential‑harvesting page content has not been publicly analyzed. Consequently, the precise target brand or the specific credential‑capture technique remain unknown. Defenders should add the domain to local deny lists, enforce DNS‑based blocking, and monitor outbound connections to the hosting provider’s IP ranges.

Continuous re‑scanning on VirusTotal and periodic checks against threat‑intel feeds are recommended to capture any escalation in detection counts. Organizations that employ web‑filtering should ensure the domain is blocked, and users should be warned to avoid any unsolicited communications that reference this URL. Ongoing observation is required to determine whether the campaign expands beyond the current indicators.