suitp-treserdesktop[.]wixstudio[.]com

This domain, suitp-treserdesktop.wixstudio.com, was identified as a brand impersonation threat targeting users of the Sui cryptocurrency platform. Analysis indicates the site was designed to mimic legitimate Sui interfaces, likely to deceive victims into disclosing sensitive credentials or authorizing fraudulent transactions. The infrastructure hosted a crypto-focused deception scheme, leveraging visual and technical elements to appear authentic while harvesting user data or redirecting assets to attacker-controlled wallets. Evidence supporting this assessment includes detection by 3 out of 95 security vendors on VirusTotal, with the domain appearing on at least one security blocklist. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC and resolved to the IP address 34.144.206.118, hosted on Google Cloud infrastructure. The SSL certificate was issued by Let’s Encrypt, a common but not exclusive indicator in phishing campaigns. The page title, '404 Error: Page Not Found | Wix Studio,' suggests the site was either taken down or intentionally obscured post-compromise, though residual artifacts confirm its malicious intent. Users who accessed this domain should immediately revoke any active sessions or authorizations linked to cryptocurrency wallets, particularly those associated with Sui. Monitor transaction histories for unauthorized activity and reset credentials for any accounts accessed during the exposure window. If sensitive data was entered, assume compromise and implement additional security measures, such as enabling multi-factor authentication and conducting a full system scan for malware. Report the incident to relevant security teams for further investigation and mitigation.