suites-apptrzour[.]wixstudio[.]com

This domain, suites-apptrzour.wixstudio.com, was identified as a high-risk phishing site targeting users of the Sui cryptocurrency platform. The site impersonates legitimate Sui wallet services, likely aiming to deceive visitors into entering sensitive credentials, such as private keys or recovery phrases, under the guise of wallet verification or token distribution. Such attacks are commonly used to gain unauthorized access to cryptocurrency wallets, leading to immediate and irreversible asset theft. The domain’s infrastructure and hosting choices suggest an attempt to appear legitimate while evading initial detection by security tools. Analysis indicates the domain was registered through GoDaddy.com, LLC on April 28, 2026, an unusual future date that may indicate an error or an attempt to obscure its true creation timeline. It resolves to the IP address 34.144.206.118, hosted on Google Cloud infrastructure, and employs a Let's Encrypt SSL certificate to present a secure connection. Security vendors on VirusTotal flagged the domain, with 12 out of 95 engines detecting malicious activity. Additionally, the domain appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD. Technologies detected on the site include Wix, React, Lodash, and Google Cloud CDN, which are consistent with modern web development practices but do not mitigate the underlying threat. Users who visited suites-apptrzour.wixstudio.com should assume their credentials or wallet information may have been compromised. Immediate action is required: disconnect any connected wallets from the site, revoke any suspicious wallet permissions, and transfer assets to a new, secure wallet if interaction occurred. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where available. Report the incident to the targeted platform’s official security channels and consider submitting the domain to additional threat intelligence feeds to aid in broader detection efforts. Avoid interacting with any communications or links associated with this domain, as follow-up phishing attempts may occur.