genesis-sui[.]org

PhishDestroy has identified the domain genesis-sui.org as a brand impersonation threat specifically targeting the Sui brand. This domain is currently offline but was registered on September 17, 2025, through NiceNIC International Group Co., Limited, and resolved to IP address 172.67.134.84. The page title observed was "Un momento…", suggesting it may have been part of a credential harvesting or phishing campaign designed to deceive Sui users.

Technical analysis reveals that genesis-sui.org is flagged by 9 out of 95 security vendors on VirusTotal, indicating a high likelihood of malicious intent. It appears on one security blocklist and has no SSL certificate, which is a red flag for a legitimate service. The domain's registration details point to a registrar often associated with low-cost or anonymous domain purchases, further increasing suspicion. These indicators collectively suggest that the domain was set up with the purpose of impersonating Sui to steal sensitive information.

Given that genesis-sui.org is now offline, the immediate risk is mitigated, but users should remain vigilant. PhishDestroy recommends that anyone who may have interacted with this domain monitor their accounts for unauthorized activity and change passwords if any credentials were entered. It is also advisable to enable two-factor authentication on all Sui-related accounts and report any suspicious emails or links to the appropriate security team. Staying informed about such threats helps protect the broader community from falling victim to similar impersonation attempts.