en-us-suites-trezo[.]pages[.]dev

This report details a malicious domain, en-us-suites-trezo.pages.dev. The site's page title, "Suspected phishing site | Cloudflare," indicates it was actively blocked as a threat. The site is an impersonation of the brand Sui, categorizing it as a phishing or brand impersonation scam. The primary threat is credential theft or data harvesting, where visitors are deceived into entering sensitive information under the guise of a legitimate Sui service.

Technical analysis provides strong evidence of malicious intent. VirusTotal shows 9 out of 95 security vendors flagged the domain as malicious. The domain was registered through Cloudflare, Inc. and created on 2025-09-22. Its IP address is 172.66.47.163, hosted in the United States by Cloudflare, Inc. (AS13335). The SSL certificate was issued by Google Trust Services / WE1. The domain uses nameservers amir.ns.cloudflare.com and elle.ns.cloudflare.com. It is flagged by at least five security vendors including ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, and ESET.

As of the current analysis, the domain is DOWN/OFFLINE, indicating it has been taken down or is no longer actively hosting content. The GridinSoft trust score is 0 out of 100, and the DOM risk score is 83, both indicating a high risk profile. This domain poses a significant threat due to its impersonation of a known brand and multiple vendor detections.