suie-walet-home[.]pages[.]dev

Analysis of suie-walet-home.pages.dev shows that the domain was created on 8 November 2025 and is hosted behind Cloudflare’s network (ASN 13335, IP 172.66.47.106, United States). The domain resolves to a Cloudflare‑provided IP address and uses Cloudflare‑owned nameservers margo.ns.cloudflare.com and pam.ns.cloudflare.com. Registration was performed through Cloudflare, Inc., and the SSL certificate presented is issued by Google Trust Services under the WE1 authority, indicating standard Cloudflare TLS termination. The site returns HTTP status 403 and displays the page title “Suspected phishing site | Cloudflare”. Security tooling records a Gridinsoft trust score of 0 out of 100, and the domain appears on a single security blocklist.

VirusTotal has flagged the domain in 13 of 95 scanned vendors, and PhishDestroy also lists it as blocked. Detected technologies include HSTS, Cloudflare, and HTTP/3, consistent with the hosting provider’s service stack. The threat is classified as brand impersonation targeting the Sui brand. The current operational status is offline.

Evidence confirms the infrastructure and hosting details, but the content of the page beyond the generic title has not been captured, leaving the specific phishing vector unknown. Defenders should block the domain at network perimeter, add the IP address 172.66.47.106 to deny lists, and monitor for any re‑registration of similar subdomains under the pages.dev namespace. Continued observation of Cloudflare‑associated blocklists and VirusTotal updates is recommended to capture any future activity. The low trust score and multiple vendor detections justify elevated risk handling, and incident response teams should treat any related emails or login attempts referencing Sui with heightened scrutiny.