tzrsuite-io[.]wixstudio[.]com

On 24 July 2026, the domain tzrsuite-io.wixstudio.com was observed hosting a brand‑impersonation campaign targeting the cryptocurrency platform Sui. The domain was registered through GoDaddy.com, LLC on 22 March 2026 and is hosted on Google Cloud infrastructure, resolving to IP address 34.144.206.118 located in the United States. The site presents a generic 404 error page supplied by Wix Studio, as indicated by the page title “404 Error: Page Not Found | Wix Studio”. The HTTP response code is 404, and the site is currently offline, as confirmed by the blocklist entry from PhishDestroy and its appearance on one additional security blocklist.

The SSL certificate is issued by Let’s Encrypt, consistent with the Wix hosting environment. Technical fingerprinting reveals the use of Wix, React, Google Cloud CDN, and HTTP/3. Nameserver delegation points to the nsone.net network (dns1.p08.nsone.net through dns4.p08.nsone.net). VirusTotal analysis shows three of ninety‑four scanners flagging the domain, indicating partial detection across the security ecosystem.

While the 404 page prevents direct observation of phishing content, the combination of recent registration, Google Cloud hosting, and alignment with known Sui impersonation patterns suggests a deliberate attempt to exploit brand trust. Defenders should add tzrsuite-io.wixstudio.com to URL filtering rules, monitor DNS queries for the nsone.net name servers, and flag any traffic to the associated IP address. Because the site is already taken offline, immediate takedown is not required, but continued surveillance is advised to detect any re‑registration or migration of the malicious payload to a new host.