suitelearrn[.]wixstudio[.]com

This domain, suitelearrn.wixstudio.com, is flagged as a high-risk brand_impersonation site targeting the Sui blockchain platform. Analysis indicates the domain was designed to mimic legitimate Sui infrastructure, likely to deceive users into disclosing credentials or transferring assets under false pretenses. No specific drainer kit signatures were identified, but the domain's structure and hosting align with known phishing campaigns targeting cryptocurrency users. The page title, '404 Error: Page Not Found | Wix Studio,' suggests the malicious content may have been removed or relocated, though residual risks remain due to prior activity. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC, with a creation date of April 15, 2026. It resolves to the IP address 34.144.206.118, hosted on Google Cloud with CDN support and HTTP/3 enabled. The domain appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD. VirusTotal reports 16 out of 95 security vendors flagging the domain as malicious, while the SSL certificate is issued by Let's Encrypt. No entries were found in Google Safe Browsing at the time of analysis, though this does not preclude prior malicious activity. The domain is currently offline, likely due to takedown actions or cessation of the campaign. However, the risk of re-emergence persists, particularly if the threat actors retain control of the domain or associated infrastructure. Users who may have interacted with this domain are advised to revoke any connected wallet permissions, reset credentials, and monitor for unauthorized transactions. Organizations should update blocklists to include this domain and its resolved IP, while security teams should investigate potential lateral movement or secondary payloads delivered through this vector. The creation date anomaly (2026) suggests possible domain spoofing or registry manipulation, warranting further scrutiny of registrar logs.