platform-suit-es[.]pages[.]dev

This report details a malicious domain, platform-suit-es.pages.dev, identified as a Trezor brand impersonation scam. The site presented itself with the page title "Trezor Suite | Secure Crypto Management," designed to deceive users into believing it was the legitimate Trezor Suite platform. The primary threat is credential theft or cryptocurrency asset compromise, as the site likely aimed to harvest login details or seed phrases from unsuspecting users.

Technical analysis provides clear evidence of malicious intent. VirusTotal flagged the domain with 8 detections out of 95 security vendors, including ADMINUSLabs, Chong Lua Dao, CyRadar, Fortinet, and Kaspersky. The domain is registered through Cloudflare, Inc., created on 2026-03-25, and resolves to IP address 188.114.96.3, hosted by CloudFlare, Inc. in Canada. It utilizes an SSL certificate from Google Trust Services / WE1, with nameservers matt.ns.cloudflare.com and paislee.ns.cloudflare.com. The GridinSoft trust rating is 0 out of 100, and the DOM risk score is 68.

As of the latest check, the domain is offline and down. The risk level is high, with the site appearing on 1 blocklist. Users who may have accessed this site should consider their credentials compromised and take immediate protective action for their cryptocurrency accounts.