appsuitpp-us[.]wixstudio[.]com

This domain, appsuitpp-us.wixstudio.com, is identified as a brand impersonation threat targeting the Sui cryptocurrency platform. Analysis indicates the site was designed to deceive users into believing it was an official Sui-related service, likely aiming to harvest credentials or distribute malicious payloads. The domain was hosted on Wix Studio infrastructure, a platform often abused for rapid deployment of phishing pages due to its ease of use and low cost. No specific drainer kit was confirmed, but the use of Wix and generic 404 error pages suggests a low-effort but potentially effective impersonation attempt. Technical indicators reveal the domain was registered through GoDaddy.com, LLC on April 25, 2026, an unusually future date that may indicate falsified registration data or a placeholder. It resolved to the IP address 34.144.206.118, associated with Google Cloud infrastructure, and employed technologies including Wix, Envoy, React, Google Cloud CDN, and HTTP/3. The SSL certificate was issued by Let's Encrypt, a common choice for both legitimate and malicious sites. VirusTotal detection shows 14 out of 95 security vendors flagged the domain as malicious, and it appears on one security blocklist. No Google Safe Browsing (GSB) hits were recorded at the time of analysis, which may reflect delayed reporting or evasion techniques. The domain is currently offline, likely taken down due to enforcement actions or abandonment by the threat actor. Despite its inactive status, residual risk remains for users who may have interacted with the site during its operational window. Organizations are advised to monitor for credential reuse or follow-up phishing attempts targeting affected users. Network defenders should block the domain and associated IP address 34.144.206.118 at the perimeter, and review logs for prior connections. Users should be alerted to verify official communications through Sui’s verified channels and report any suspicious activity.