tezor-suite-docs[.]pages[.]dev

The domain tezor-suite-docs.pages.dev is registered via Cloudflare, Inc. and uses the Cloudflare authoritative nameservers addilyn.ns.cloudflare.com and arturo.ns.cloudflare.com. DNS resolution points to the IP address 172.66.44.254, which is a Cloudflare edge node. The domain is currently marked as active with an elevated risk rating and is classified as generic phishing. Threat intelligence from PhishDestroy lists the domain as blocked, indicating that at least one reputable phishing mitigation service has taken action against it.

VirusTotal analysis shows that 7 of 91 security vendors have flagged the domain as malicious, providing a modest consensus of detection across the security community. Additionally, the domain appears on a single external security blocklist, reinforcing its malicious reputation. No public information on SSL certificate details, HTTP response codes, page title, or content analysis is available, leaving the surface‑web characteristics of the site unverified. Consequently, attribution to a specific phishing campaign, target brand, or malicious kit cannot be confirmed at this stage.

Defenders should enforce DNS‑level blocking for tezor-suite-docs.pages.dev, add the address 172.66.44.254 to network‑level deny lists, and monitor outbound traffic for connections to that IP. Continuous observation of VirusTotal and blocklist feeds is advised to capture any changes in vendor detections. Incident response teams should treat any credentials or session data submitted to this domain as compromised, prompting immediate password resets and user notification.