appsuite-ex[.]wixstudio[.]com

The domain appsuite-ex.wixstudio.com is identified as a brand-impersonation threat targeting users of the Sui cryptocurrency platform. Analysis confirms this domain was actively employed in phishing campaigns designed to deceive victims into disclosing sensitive credentials or transferring digital assets under false pretenses. As of the latest verification, the domain has been taken offline, though residual risk remains due to its prior malicious activity. Infrastructure analysis reveals multiple technical indicators supporting the malicious classification. The domain resolves to the IP address 34.144.206.118 and was registered through GoDaddy.com, LLC on April 28, 2026, a future-dated entry likely indicative of falsified registration details. It appears on one security blocklist and has been flagged by 15 of 95 security vendors on VirusTotal, including detection by PhishDestroy. The Gridinsoft trust score for this domain is 0/100, reflecting a complete lack of legitimacy. The SSL certificate is issued by Let's Encrypt, a common tactic among threat actors to create a superficial appearance of security. Detected technologies include Wix, React, Google Cloud, Lodash, HSTS, Google Cloud CDN, and HTTP/3, suggesting the use of modern web infrastructure to support the phishing operation. Current status indicates the domain has been rendered inaccessible, likely due to takedown actions or infrastructure suspension. However, the risk assessment remains elevated due to the domain's prior use in targeted phishing campaigns. Organizations and individuals are advised to block the domain and its associated IP address at the network perimeter. Cryptocurrency users should verify all communications and transaction requests through official Sui channels only. Security teams are recommended to monitor for any re-emergence of this domain or similar variations using the same infrastructure. Proactive hunting for related indicators, such as the IP address and SSL certificate patterns, is strongly encouraged to mitigate potential follow-on attacks.