circlesuite[.]net

This domain, circlesuite.net, is flagged for brand impersonation targeting Sui, a Layer 1 blockchain platform. Analysis indicates the site was designed to deploy wallet-draining malware, tricking users into connecting their cryptocurrency wallets to malicious smart contracts. The domain mimics legitimate Sui ecosystem interfaces, likely using pre-built phishing kits to harvest private keys or seed phrases, leading to unauthorized fund transfers. Infrastructure analysis reveals the domain was registered on June 10, 2025, through GoDaddy.com, LLC. It resolved to the IP address 156.67.80.119, a hosting provider frequently associated with phishing campaigns. VirusTotal reports 6 out of 95 security vendors flagged the domain as malicious, while it appeared on 3 distinct security blocklists. The SSL certificate was issued by GoDaddy.com, providing a false sense of legitimacy. No Google Safe Browsing (GSB) entries were recorded at the time of analysis, suggesting the domain may have evaded initial detection by some automated systems. The domain has since been taken offline, likely due to coordinated takedown efforts by security vendors and hosting providers. However, residual risk remains, as phishing infrastructure often resurfaces under new domains or IPs. Users who interacted with circlesuite.net should immediately revoke wallet permissions, transfer assets to new wallets, and monitor for unauthorized transactions. Organizations are advised to block the domain and associated IP (156.67.80.119) at the network level, and monitor for similar impersonation attempts targeting Sui or other blockchain platforms.