appsuite-triezor[.]wixstudio[.]com

This domain, appsuite-triezor.wixstudio.com, was identified as a high-risk phishing site designed to impersonate the Sui cryptocurrency platform. Brand impersonation phishing of this nature typically aims to deceive users into disclosing sensitive credentials, such as wallet recovery phrases or private keys, by presenting a fraudulent interface that mimics the legitimate service. Victims may unknowingly authorize malicious transactions, leading to unauthorized access and irreversible loss of digital assets. The threat is particularly severe for users unfamiliar with security best practices or those who do not verify domain authenticity before interacting with cryptocurrency-related services. Analysis indicates that the domain was registered on April 27, 2026, through GoDaddy.com, LLC, a common registrar for both legitimate and malicious domains. It resolved to the IP address 34.144.206.118, hosted on Google Cloud infrastructure, and employed technologies such as Wix, React, and Google Cloud CDN. The domain was flagged by 14 out of 95 security vendors on VirusTotal, including detection by PhishDestroy, PhishingArmy, and OISD, and appeared on three distinct security blocklists. The Gridinsoft trust score of 0/100 further corroborates its malicious classification. The SSL certificate was issued by Let’s Encrypt, a widely used certificate authority that does not inherently validate the legitimacy of the domain’s intent. Despite its current offline status, the domain’s infrastructure and historical activity remain indicative of a coordinated phishing campaign targeting cryptocurrency users. Users who visited appsuite-triezor.wixstudio.com should assume potential exposure and take immediate remedial actions. First, revoke any wallet permissions or session authorizations granted during the interaction with the site. Second, transfer any remaining assets to a new, secure wallet using a clean device to mitigate the risk of persistent compromise. Third, monitor all linked accounts, including email and cryptocurrency exchange profiles, for unauthorized activity. If credentials were entered, reset passwords and enable multi-factor authentication where available. Finally, report the incident to relevant security teams or fraud reporting platforms to contribute to broader threat intelligence efforts. Given the irreversible nature of cryptocurrency transactions, proactive measures are critical to preventing financial loss.