eng-s-uit-use[.]pages[.]dev

Analysis of the domain eng-s-uit-use.pages.dev indicates it is a confirmed crypto scam impersonating Trezor, a hardware cryptocurrency wallet provider. The domain was registered on March 23, 2026, through Cloudflare, Inc., and is hosted on Cloudflare infrastructure, resolving to the IP address 188.114.97.3, located in Canada. The SSL certificate is issued by Google Trust Services (WE1), a common certificate authority for malicious and legitimate domains alike, which does not inherently indicate trustworthiness. The page title, 'Trezor Suite – Official App® with handing,' explicitly mimics Trezor’s branding, and the domain is classified as a crypto scam in available threat intelligence. As of July 23, 2026, the domain is offline, returning an HTTP 403 status, which may indicate takedown or temporary suspension.

Detection engines on VirusTotal flagged the domain, with 17 out of 94 security vendors marking it as malicious. Gridinsoft assigned a trust score of 0/100, and the domain appears on at least one security blocklist, with PhishDestroy explicitly blocking it. Nameservers (brit.ns.cloudflare.com and dexter.ns.cloudflare.com) are consistent with Cloudflare’s infrastructure, which is frequently abused for phishing due to its ease of use and free services. Defenders should treat this domain as high-risk.

Although currently offline, the infrastructure may be repurposed or reactivated. The combination of brand impersonation, low trust scores, and detection by multiple security vendors confirms its malicious intent. Network-level blocking is recommended, and security teams should monitor for any re-emergence of this domain or similar patterns (e.g., 'suit-use' variations) under Cloudflare Pages or other hosting providers. No evidence suggests this domain is safe for any user interaction.