us-suitstrzr[.]pages[.]dev

The domain us-suitstrzr.pages.dev is currently classified as an elevated‑risk generic phishing site. Registration data shows the domain was created through Cloudflare, Inc., using the nameservers ada.ns.cloudflare.com and ned.ns.cloudflare.com, indicating that the registrar’s DNS protection services are being leveraged. DNS resolution points to the IPv4 address 172.66.47.91, an address commonly associated with Cloudflare‑hosted content delivery networks, which can obscure the true backend infrastructure and complicate attribution. Threat intelligence sources list the domain on one public blocklist and note that the PhishDestroy service actively blocks it. VirusTotal analysis reports that 12 of 91 antivirus and URL‑reputation engines have flagged the domain as malicious, a signal that multiple independent scanners have observed suspicious behavior.

The detection count, while not a majority, is significant enough to merit caution, especially given the elevated risk rating. No public information is available regarding the site’s SSL certificate, HTTP response codes, page title, or any observed payload. Consequently, the precise phishing tactics employed—such as credential harvesting, malware delivery, or credential‑only lures—remain unconfirmed. The lack of visible branding or targeted victim profile also prevents a more granular attribution.

Defenders should treat traffic to and from us-suitstrzr.pages.dev as hostile. Immediate mitigation steps include adding the domain to DNS blocklists, configuring web‑proxy filters to deny HTTP/HTTPS requests, and monitoring outbound connections for attempts to resolve the IP 172.66.47.91. Because the domain is hosted behind Cloudflare, threat hunters may consider correlating activity with other domains sharing the same IP or nameserver set, as this can reveal additional malicious actors using the same infrastructure.