sitenasuikeda[.]heteml[.]net

sitenasuikeda.heteml.net is a phishing domain engaged in brand impersonation, specifically targeting the Sui brand. The domain is currently offline, having been taken down after its malicious activities were identified. It posed as a login page for "アルファメール プレミア 会員サイト" (Alpha Mail Premium Member Site), a fraudulent front designed to harvest credentials from unsuspecting users.

This domain was flagged by 11 out of 95 security vendors on VirusTotal, indicating a significant but not universally recognized threat. It was registered on September 08, 2005, through ENOM, INC., and resolves to the IP address 157.7.189.253. The SSL certificate was issued by GlobalSign nv-sa / GlobalSign GCC R6 AlphaSSL CA 2025, lending a veneer of legitimacy. It appears on two security blocklists, reflecting its identification by some threat intelligence sources.

Given its offline status, the immediate risk is mitigated, but users should remain vigilant. PhishDestroy recommends that users never enter credentials on sites reached via unsolicited links, and always verify the URL before logging in. If users have interacted with this domain, they should change their passwords immediately and enable multi-factor authentication on affected accounts.