treasuresuit-en[.]wixstudio[.]com

This domain, treasuresuit-en.wixstudio.com, is flagged as a brand impersonation phishing site targeting the Sui cryptocurrency platform. Analysis indicates the infrastructure is designed to mimic legitimate Sui-related services, likely to harvest user credentials or facilitate unauthorized transactions. The domain does not explicitly advertise a drainer kit, but its structure and targeting align with wallet-draining phishing campaigns observed in recent cryptocurrency-related threats. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC, and resolves to the IP address 34.144.206.118. The SSL certificate is issued by Let's Encrypt, a common practice among phishing sites to appear legitimate. The domain was created on April 09, 2026, and has been flagged by 13 out of 95 security vendors on VirusTotal. Additionally, it appears on one security blocklist, further confirming its malicious classification. No Google Safe Browsing (GSB) entries were identified at the time of analysis. The domain is currently offline, likely due to takedown efforts or abandonment by the threat actor. However, the elevated risk level persists due to the potential for re-activation or migration to a new domain. Users who interacted with this domain are advised to revoke any connected wallet permissions, monitor for unauthorized transactions, and reset credentials associated with cryptocurrency services. Organizations should update blocklists to include this domain and its associated IP address to prevent future access attempts.