trizr-io--suites[.]pages[.]dev

Analysis of trizr-io--suites.pages.dev indicates that the domain was registered through Cloudflare, Inc. on February 21 2026 and resolves to the Cloudflare edge address 188.114.96.3, located in the United States under ASN 13335. The site presents the page title “Suspected phishing site | Cloudflare” and serves a Google Trust Services / WE1 SSL certificate, confirming the use of a valid TLS chain. HTTP responses return a 403 status code, and the host advertises HSTS and HTTP/3 support, consistent with standard Cloudflare front‑end services. VirusTotal scans have flagged the domain in 13 of 93 security engines, and the domain appears on one external blocklist.

PhishDestroy has explicitly blocked the host, and both Gridinsoft (0/100) and Scamadviser (1/100) assign extremely low trust scores, reinforcing the malicious assessment. The nameservers are listed as leo.ns.cloudflare.com and elle.ns.cloudflare.com, further confirming Cloudflare’s hosting role. The intelligence tags the site as a “Crypto Scam” that impersonates the Sui brand.

No additional evidence, such as captured page content or phishing kit identifiers, is available, leaving the exact attack vector and payload unknown. Defenders should add the domain and its resolving IP to blocklists, monitor for newly‑registered Cloudflare‑hosted domains that reference Sui or similar keywords, and consider enforcing strict outbound filtering for connections to Cloudflare edge nodes that resolve to the same IP range. Continuous re‑scanning on VirusTotal and other multi‑engine platforms is recommended to capture any changes in detection status while the site remains offline.