ensuiteapp[.]wixstudio[.]com

This domain, ensuiteapp.wixstudio.com, was identified as a brand impersonation threat targeting Sui, a blockchain platform. The site likely presented itself as an official Sui wallet or related service to deceive users into submitting sensitive credentials, such as private keys or recovery phrases. Such attacks are commonly used to gain unauthorized access to cryptocurrency wallets, leading to potential financial loss for victims. The domain was hosted on Wix Studio infrastructure, a legitimate platform often exploited for phishing due to its accessibility and ease of use. Analysis indicates the domain was flagged by 4 out of 95 security vendors on VirusTotal, a relatively low detection rate that suggests either evasion techniques or recent takedown before broader detection. The domain resolved to the IP address 34.144.206.118, part of Google Cloud’s infrastructure, and was registered through GoDaddy.com, LLC. The SSL certificate was issued by Let’s Encrypt, a common choice for both legitimate and malicious sites due to its free and automated nature. The site was blocked by at least one security blocklist and was taken offline, though its infrastructure remains a potential indicator of compromise. Users who visited ensuiteapp.wixstudio.com should assume their interactions may have been compromised. If any credentials, private keys, or personal information were entered, immediate action is required. Victims should transfer any remaining assets from the affected wallet to a new, secure wallet and revoke any connected permissions or authorizations. Monitor associated accounts for unauthorized transactions and consider reporting the incident to relevant blockchain security teams or fraud reporting platforms. The use of hardware wallets or multi-factor authentication for future transactions is strongly recommended to mitigate similar risks.