screen-suits-desktop[.]wixstudio[.]com

This domain is flagged as an elevated-risk brand impersonation threat targeting the Sui cryptocurrency platform. Analysis indicates the infrastructure was designed to mimic legitimate Sui services, likely to deceive users into disclosing credentials or transferring assets. The threat type aligns with observed patterns of cryptocurrency-related phishing, where attackers exploit brand recognition to facilitate fraudulent transactions or account takeovers.

Infrastructure analysis reveals the domain was registered on April 27, 2026, through GoDaddy.com, LLC, and resolves to the IP address 34.144.206.118. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious domains. Detection metrics show 2 out of 95 security vendors on VirusTotal flagged the domain as malicious, while Gridinsoft assigned a trust score of 0/100. The domain appears on one security blocklist and was actively blocked by PhishDestroy prior to being taken offline. Technologies detected include Wix, React, Google Cloud, and Google Cloud CDN, suggesting the use of a hosted website builder platform to reduce operational overhead for the threat actor.

Mitigation for this brand impersonation threat involves several technical and procedural controls. Network defenders should update blocklists to include the domain and its resolving IP address, 34.144.206.118, to prevent access from internal networks. Organizations should implement domain monitoring to detect newly registered domains containing variations of the Sui brand name, particularly those using third-party hosting services. End-user education should emphasize verifying domain authenticity before entering credentials or authorizing transactions, especially for cryptocurrency-related services. Additionally, multi-factor authentication and hardware-based security keys should be enforced to reduce the impact of credential theft.