osmosui[.]xyz

The domain osmosui.xyz is a confirmed phishing site engaged in brand impersonation targeting the cryptocurrency platform 'sui'. It operated as a cryptocurrency scam designed to deceive users into interacting with fraudulent content, though no specific drainer kit was identified. As of the latest verification, osmosui.xyz has been taken offline, but its prior activity poses residual risks to users who may have engaged with it.

Technical indicators confirm the malicious nature of osmosui.xyz. The domain was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Forcepoint ThreatSeeker, and appeared on 1 security blocklist (PhishDestroy). Registered through Go Daddy, LLC on September 27, 2024, it resolved to the IP address 64.29.17.1, hosted on Amazon.com, Inc.'s infrastructure (AS16509) in the US. No SSL certificate was available, and the observed page title was 'osmo sui'. The domain's creation date and limited detection do not diminish its confirmed role in cryptocurrency phishing.

Users who interacted with osmosui.xyz should take immediate safety steps. Revoke any token approvals granted to unknown or suspicious contracts, and transfer remaining funds to a new, secure wallet. Monitor transaction histories for unauthorized activity and enable two-factor authentication (2FA) on all cryptocurrency accounts. Report the domain to relevant platforms, including the impersonated brand 'sui', and submit it to additional blocklists such as Google Safe Browsing or PhishTank to prevent further exploitation.