tresuite--trezo[.]wixstudio[.]com

This domain, tresuite--trezo.wixstudio.com, represents a brand impersonation threat targeting users of the Sui blockchain platform. Analysis indicates the site was designed to mimic legitimate Sui interfaces, likely to harvest login credentials, wallet recovery phrases, or other sensitive authentication details from unsuspecting victims. The use of a similar naming convention (tresuite--trezo) suggests an attempt to deceive users through visual or typographical confusion, a common tactic in cryptocurrency-related fraud schemes. Infrastructure analysis reveals the domain was registered on April 12, 2026, through GoDaddy.com, LLC, and resolves to the IP address 34.144.206.118. At the time of detection, 12 out of 95 security vendors on VirusTotal flagged the domain as malicious, indicating a moderate but confirmed level of risk. The domain appears on one security blocklist and was previously hosted on Wix Studio infrastructure, utilizing technologies such as React, Google Cloud, and Google Cloud CDN. The SSL certificate is issued by Let's Encrypt, which, while standard for encryption, does not validate the legitimacy of the site's content or intent. If a user visited tresuite--trezo.wixstudio.com, immediate action is required to mitigate potential compromise. First, cease all interaction with the site and avoid entering any credentials or personal information. If login details or wallet recovery phrases were submitted, assume they are compromised and revoke access to all associated accounts. Rotate passwords and enable multi-factor authentication where available. Monitor Sui wallet transactions for unauthorized activity and consider transferring assets to a new wallet if suspicious behavior is detected. Users should also scan their devices for malware using updated security tools, as brand impersonation sites may distribute additional payloads. Report the incident to the legitimate Sui platform and relevant security teams to aid in broader threat mitigation efforts.