official-app-suit-es[.]pages[.]dev

Analysis of official-app-suit-es.pages.dev shows that the domain is currently active and has been classified as a generic phishing site with an elevated risk rating. The domain appears on one public security blocklist and is explicitly blocked by the PhishDestroy service. DNS resolution points to the IPv4 address 188.114.96.3, which is hosted by Cloudflare, Inc. The authoritative nameservers are buck.ns.cloudflare.com and michelle.ns.cloudflare.com, confirming that the domain leverages Cloudflare’s DNS and DDoS protection infrastructure. Registration was performed through Cloudflare, Inc., indicating that the registrant used the provider’s privacy‑preserving registration pathway.

VirusTotal has processed the domain and 11 of 91 security vendors have flagged it as malicious, reinforcing the suspicion raised by the blocklist entry. No additional public reputation services such as Google Safe Browsing, OTX, or SSL‑grade assessments are listed in the available intelligence, so the current confidence rests on the blocklist, the PhishDestroy block, and the VirusTotal detections. Uncertainty remains regarding the exact content served by the site because a page title or content snapshot has not been published in the intelligence feed. Consequently, the specific phishing lure cannot be confirmed at this time.

Analysts should treat the domain as malicious until a deeper content inspection is performed. Defensive recommendations include adding the domain to outbound and inbound firewall deny lists, updating DNS filtering policies to block the domain and its associated IP address, and monitoring for any traffic to the Cloudflare nameservers that may be indicative of further infrastructure reuse. Continuous re‑evaluation is advised, as additional detection sources or content analysis may emerge.