suit-treasure[.]framer[.]ai

The domain suit-treasure.framer.ai was identified as a brand impersonation threat targeting the Sui blockchain ecosystem. This fraudulent site attempted to mimic Sui's official platforms to deceive users, potentially aiming to harvest credentials or lure victims into connecting wallets for asset theft. Although no specific crypto drainer kit was confirmed, the domain's structure and purpose align with typical phishing operations in the crypto space.

Technical analysis reveals several indicators of malicious intent. VirusTotal flagged the domain with a score of 1 out of 95 security vendors, indicating low initial detection but sufficient concern to warrant investigation. The domain was registered through CSC Corporate Domains, Inc. and resolves to IP address 35.71.142.77. Its creation date of January 6, 2018, suggests it may have been repurposed for malicious activity. Notably, the domain appears on one security blocklist, and the SSL certificate was issued by Let's Encrypt (E8), a common choice for phishing sites due to its free and automated issuance. Google Safe Browsing status was not explicitly provided but should be considered alongside these findings.

As of the latest check, suit-treasure.framer.ai has been taken offline, rendering it currently inaccessible. The page title displayed "Site Not Found | Framer", indicating the phishing content was removed or the domain is no longer active. However, the risk remains elevated because similar domains may resurface under different subdomains or TLDs. Users who may have interacted with this site should monitor their accounts and wallets for unauthorized activity. PhishDestroy recommends avoiding any interaction with this domain and verifying official Sui channels directly. If credentials were entered, immediate password changes and enabling two-factor authentication are advised.