startsuitp-deskotp[.]wixstudio[.]com

This domain, startsuitp-deskotp.wixstudio.com, poses a targeted brand impersonation threat against Sui, a blockchain platform. Analysis indicates the site likely attempted to deceive users into believing it was an official Sui support or desktop application portal, potentially leading to credential theft, unauthorized transactions, or the deployment of crypto-draining malware. The 404 error currently displayed suggests the malicious content may have been removed or relocated, but prior activity remains a confirmed risk based on historical detection data and infrastructure analysis. Evidence supporting this assessment includes detection by 7 out of 95 security vendors on VirusTotal, with the domain appearing on at least one security blocklist. Infrastructure analysis reveals the domain was registered on April 28, 2026, through GoDaddy.com, LLC, and resolves to the IP address 34.144.206.118. Technologies detected on the site include Wix, Envoy, React, Google Cloud, and Google Cloud CDN, alongside an SSL certificate issued by Let’s Encrypt. The domain’s creation date and hosting environment align with patterns observed in short-lived phishing campaigns targeting cryptocurrency users. Users who visited startsuitp-deskotp.wixstudio.com should immediately revoke any permissions granted to browser extensions or applications linked to the site. All credentials or recovery phrases entered on the domain must be considered compromised and should be changed from a secure device. Wallet addresses or transaction hashes associated with the site should be reviewed for unauthorized activity. If crypto assets were transferred, victims should report the incident to relevant blockchain analytics platforms and law enforcement. Monitoring for follow-up phishing attempts via email or social engineering is strongly advised.