suiteapps-starts[.]wixstudio[.]com

This domain, suiteapps-starts.wixstudio.com, has been identified as part of a brand impersonation campaign targeting the Sui blockchain network. The site is currently offline, but prior analysis confirms its role in fraudulent activity designed to deceive users into believing they are interacting with official Sui infrastructure. The specific threat type involves brand impersonation, where attackers mimic legitimate branding to exploit trust and potentially facilitate unauthorized transactions or data harvesting. Infrastructure analysis reveals the domain resolved to the IP address 34.144.206.118, hosted on Google Cloud infrastructure with content delivery via Google Cloud CDN. It was registered through GoDaddy.com, LLC, and employed technologies including Wix, React, and HTTP/3. The SSL certificate was issued by Let's Encrypt. Detection metrics indicate the domain was flagged by 3 of 95 security vendors on VirusTotal, while appearing on a single security blocklist. Additional trust assessments, such as the Gridinsoft trust score, assigned a rating of 0 out of 100, further corroborating its malicious classification. The page title, '404 Error: Page Not Found | Wix Studio,' suggests either a temporary takedown or an attempt to evade detection post-compromise. At present, the domain has been taken offline, reducing immediate risk to end users. However, similar campaigns often re-emerge under new domains or hosting arrangements. Organizations and individuals are advised to monitor for newly registered domains impersonating Sui or other blockchain networks, particularly those leveraging cloud-based hosting providers. Network-level protections, such as DNS filtering and IP reputation checks, should be implemented to block known malicious infrastructure. Users should verify domain authenticity through official channels before interacting with any platform claiming affiliation with Sui or other cryptocurrency services. Security teams are encouraged to review logs for connections to 34.144.206.118 and related indicators of compromise.