official-suitesapp[.]wixstudio[.]com

This domain, official-suitesapp.wixstudio.com, was identified as a brand impersonation threat targeting Sui, a decentralized blockchain platform. The site was designed to deceive users into believing they were interacting with an official Sui application or service, likely to harvest credentials, private keys, or other sensitive information associated with cryptocurrency wallets or accounts. The domain leveraged a legitimate hosting provider, Wix Studio, to lend superficial credibility while exploiting the platform’s infrastructure for malicious purposes. Analysis indicates the domain was flagged by 14 out of 95 security vendors on VirusTotal, reflecting elevated detection rates. It was registered through GoDaddy.com, LLC on April 26, 2026, an anomalous creation date suggesting potential domain spoofing or backdating. The domain appeared on one security blocklist and resolved to the IP address 34.144.206.118, hosted on Google Cloud infrastructure. Technologies detected include Wix, React, Google Cloud CDN, and HTTP/3, alongside a Let's Encrypt SSL certificate, which is commonly abused in phishing campaigns to mimic secure connections. Users who visited official-suitesapp.wixstudio.com should assume potential exposure of sensitive data, particularly if credentials or wallet information were entered. Immediate actions include revoking access to any linked accounts, rotating passwords, and monitoring for unauthorized transactions or account activity. If cryptocurrency wallets were connected, users should transfer assets to a new wallet and review transaction histories for anomalies. Additionally, affected users should scan their devices for malware, as phishing sites often deploy secondary payloads. Network-level blocking of the domain and its associated IP (34.144.206.118) is recommended for organizations to prevent further exposure.