office-kits[.]net

The domain office-kits.net has been identified as a brand impersonation threat specifically targeting the Sui brand. This domain is currently offline, but its malicious intent is clear from its deceptive page title, "LibreOffice Cloud Toolkit - Enhanced Cloud Tools for LibreOffice | Free Online Office Suite," which attempts to lure users into a false sense of legitimacy. The domain was created on April 14, 2026, and resolved to the IP address 172.67.153.45, hosted behind Cloudflare. It was registered through Fewmoretaps OU d/b/a Trustname.com, a registrar often associated with questionable domains.

Technical analysis reveals that office-kits.net is flagged by 2 out of 95 security vendors on VirusTotal, indicating a moderate but significant risk. The domain also appears on one security blocklist, and its SSL certificate is issued by Let's Encrypt (E7), which is commonly used by both legitimate and malicious sites. Despite being taken offline, the domain's history and indicators suggest it was designed to harvest sensitive information or credentials from users mistaking it for an official Sui platform. PhishDestroy's risk assessment rates this domain at an elevated threat level due to its impersonation of a well-known brand and its relatively recent creation date.

Given that office-kits.net is now offline, the immediate risk is reduced, but users should remain vigilant. PhishDestroy recommends that anyone who interacted with this domain monitor their accounts for suspicious activity and avoid visiting similar domains. Always verify the authenticity of websites by checking official URLs and using trusted security tools. This incident underscores the importance of recognizing brand impersonation tactics and staying informed about emerging threats.