homes-suiteapp[.]wixstudio[.]com

This domain, homes-suiteapp.wixstudio.com, operates as a brand impersonation site targeting users of the Sui blockchain platform. Analysis indicates the site was designed to mimic legitimate Sui wallet interfaces, tricking visitors into entering sensitive credentials such as private keys or recovery phrases. The stolen information would enable attackers to gain unauthorized access to victims' cryptocurrency wallets, leading to potential financial losses. The site's infrastructure and design elements closely resemble official Sui resources, increasing the likelihood of successful deception among less cautious users. Infrastructure analysis reveals several technical indicators confirming the malicious nature of this domain. The site was registered through GoDaddy.com, LLC on April 17, 2026, though this future date suggests possible falsification of registration records. It resolves to the IP address 34.144.206.118, hosted on Google Cloud infrastructure, and employs technologies including Wix, React, and Google Cloud CDN. Security vendors have flagged the domain with 14 out of 95 detection engines on VirusTotal, and it appears on three distinct security blocklists, including PhishDestroy and PhishingArmy. The use of a Let's Encrypt SSL certificate further enhances the site's appearance of legitimacy, despite its fraudulent purpose. Users who may have interacted with homes-suiteapp.wixstudio.com should take immediate action to secure their assets. First, disconnect any wallets or accounts linked to the site and cease all interactions with it. Next, monitor all associated cryptocurrency wallets for unauthorized transactions and consider transferring funds to a new, secure wallet if any suspicious activity is detected. It is also advisable to change passwords and enable multi-factor authentication on all related accounts. Reporting the incident to the legitimate Sui platform and relevant cybersecurity organizations can help prevent further exploitation. Regularly updating security software and verifying domain authenticity before entering credentials are critical practices to avoid similar threats in the future.