trrzoroisuite[.]m-pages[.]com

Analysis of trrzoroisuite.m-pages.com shows a high‑risk brand‑impersonation campaign targeting the Sui brand. The domain was registered on February 21, 2026 via MarkMonitor and resolves to the Amazon‑owned IP address 3.66.78.109 located in Germany, ASN 16509. Infrastructure evidence includes Amazon Elastic Load Balancer and generic AWS hosting, with four of ninety‑three VirusTotal scanners flagging the domain. The site presents a 404 HTTP response, uses a Sectigo Limited/DV R36 certificate, and is served by the nameservers ns-1338.awsdns-39.org, ns-2011.awsdns-59.co.uk, and ns-453.awsdns-56.com. Gridinsoft assigns a trust score of 0 / 100 and the domain appears on a single security blocklist; it is also blocked by PhishDestroy. The campaign is classified as a crypto scam and remains active. Defenders should treat any traffic to this host as malicious, enforce network‑level blocks on the domain and its resolved IP, and add the domain to internal allow‑list exclusions. Continuous monitoring of AWS‑hosted domains that employ similar naming patterns and the observed nameserver set is advised, as threat actors may replicate the infrastructure. Because the site returns a 404, active content cannot be inspected, so threat hunters should prioritize correlation of outbound connections to the IP with credential or wallet compromise indicators related to Sui. Until further forensic detail emerges, the recommendation is to maintain the domain on block lists, monitor for similar brand‑impersonation constructs, and ensure endpoint protection alerts on any attempts to resolve or contact the IP address.