new-trzrsuite-app[.]pages[.]dev

Analysis of new-trzrsuite-app.pages.dev indicates that the domain was created on 21 February 2026 and is currently taken offline. The site presents the page title “Suspected phishing site | Cloudflare” and is classified under the scam type “Brand Impersonation” targeting the Sui brand. VirusTotal records show that 10 of 93 scanning engines flagged the domain as malicious, confirming a consensus of concern among security vendors. The hosting infrastructure is provided by Cloudflare, as evidenced by the nameservers ariella.ns.cloudflare.com and morgan.ns.cloudflare.com and the resolved IP address 172.66.47.69, which belongs to AS13335 (Cloudflare, Inc.) located in the United States.

The TLS certificate is issued by Google Trust Services under the WE1 identifier, and the service enforces HTTP Strict Transport Security and supports HTTP/3, indicating a modern HTTPS configuration. Reputation scoring from Gridinsoft assigns a trust score of 0 / 100, and the domain appears on a single security blocklist. It has been actively blocked by the PhishDestroy feed, reinforcing its malicious status. The HTTP response returned a 403 status code, which aligns with the current offline state and suggests that legitimate access is denied.

Defenders should immediately block the domain at network perimeters and update DNS filtering policies to deny resolutions to 172.66.47.69. Adding the domain to internal blocklists and sharing the indicator with threat‑intel platforms will help prevent inadvertent user exposure. Continuous monitoring of Cloudflare‑hosted sub‑domains for similar creation patterns is advised, as the rapid provisioning of new‑trzrsuite‑app.pages.dev demonstrates a low‑cost abuse vector for brand‑impersonation campaigns. The lack of publicly available page content beyond the title means that further forensic analysis of the landing page is not possible at this time, and analysts should treat the site as a confirmed malicious asset pending any change in status.