stocksrwa[.]io

The domain stocksrwa.io is associated with a phishing threat, specifically involving brand impersonation of Sui. This domain poses an elevated risk as it is designed to deceive users into believing they are engaging with legitimate Sui-related services, potentially leading to financial loss or data compromise. The site has been taken offline, which reduces immediate risk but does not eliminate potential residual threats.

Technical indicators for stocksrwa.io include detection by 3 of 95 security vendors on VirusTotal, specifically ChainPatrol, alphaMountain.ai, and Seclookup. The domain was registered through NameCheap, Inc. on October 12, 2025, and resolves to the IP address 34.111.179.208, located in the US under Google LLC (AS396982). It is listed on one security blocklist, PhishDestroy, and uses an SSL certificate issued by Let's Encrypt / E7. The site previously had a page title of 'Sui RWA Stocks | Trade Real Tokenized Stocks on Sui Network' and is associated with technologies such as Google Cloud and HTTP/3.

For individuals who interacted with stocksrwa.io, it is crucial to take immediate safety steps. If cryptocurrency transactions were involved, users should revoke token approvals and transfer funds to a secure wallet. In cases of credential or login phishing, changing passwords, enabling two-factor authentication, and monitoring for fraudulent activity are recommended. Reporting the incident to relevant authorities and platforms can help mitigate further damage and protect others from similar scams.