appstart-suites[.]wixstudio[.]com

This domain was identified as part of a brand impersonation campaign targeting users of the Sui cryptocurrency platform. The site was designed to mimic legitimate Sui services, likely to deceive visitors into disclosing sensitive information or interacting with malicious smart contracts. Analysis indicates the domain hosted content intended to exploit trust in the Sui brand, potentially leading to financial loss or unauthorized access to crypto wallets. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on April 29, 2026, an unusual creation date that may indicate spoofing or manipulation of registration records. The site resolved to the IP address 34.144.206.118 and utilized technologies including Wix, React, Google Cloud, and Google Cloud CDN. At the time of investigation, 13 out of 95 security vendors on VirusTotal flagged the domain as malicious, and it appeared on one security blocklist. The SSL certificate was issued by Let’s Encrypt, a common practice among threat actors to lend superficial legitimacy to phishing infrastructure. If you visited this domain or interacted with its content, immediate action is recommended. Disconnect any crypto wallets or devices used during the visit and revoke any permissions granted to suspicious applications or smart contracts. Scan the device for malware using updated security tools and monitor accounts for unauthorized transactions. Report the incident to the legitimate Sui platform and consider notifying relevant authorities if financial loss occurred. Avoid re-engaging with the domain, as it may still pose risks even in its current offline state.