view--trzrsuiteus[.]pages[.]dev

The domain view--trzrsuiteus.pages.dev was registered on April 06, 2026 and is currently active. Threat intelligence classifies it as a high‑risk brand‑impersonation campaign targeting the Sui brand. The site presents a page titled “Trezor Suite | Secure Bitcoin & Crypto Wallet Software,” a clear attempt to mimic legitimate wallet software and lure users into credential harvesting. Infrastructure analysis shows the domain is hosted behind Cloudflare, Inc., using the nameservers martin.ns.cloudflare.com and surina.ns.cloudflare.com. DNS resolution points to the IP address 188.114.97.3, which belongs to Cloudflare’s network in Canada. The TLS certificate is issued by Google Trust Services under the WE1 root, indicating a valid HTTPS connection but offering no assurance about the underlying content. Public blocklists confirm the domain appears on at least one security blocklist and is blocked by PhishDestroy. The Gridinsoft trust score of 0 / 100 reflects a total lack of credibility. VirusTotal reports five out of ninety‑five scanners flagging the domain as malicious, providing additional corroboration of its phishing nature. Despite a HTTP 200 response, the combination of brand impersonation, low trust scores, and blocklist presence justifies the high‑risk rating. Defenders should block DNS resolution for view--trzrsuiteus.pages.dev at the network perimeter and add the domain to email and web filtering rules. Incident response teams should monitor for any credential submissions or authentication attempts directed at the site, and users should be educated to verify legitimate Sui communication channels. Ongoing surveillance of Cloudflare‑hosted infrastructure is advised, as the attacker can quickly relocate within the same provider.