suilens[.]tech

The domain suilens.tech was first observed on July 12, 2026 and is classified as a high‑risk brand‑impersonation campaign targeting the Sui ecosystem. The site presents the page title “Sui Package Visualizer”, which aligns with the advertised brand target. Registration data indicates the domain was created on 22 November 2025 and is managed through LWS dba Ligne Web Services. Resolution of suilens.tech points to IP address 92.112.193.140, located in France and announced by AS47583 (Hostinger International Limited). The hosting provider is Hostinger, and the domain is served over HTTPS using a Let’s Encrypt certificate (E8). DNS is delegated to four LWS name servers (ns21‑ns24.lwsdns.com) and includes a single MX record (mail.suilens.tech, priority 10). HTTP traffic is delivered via HTTP/3, and the site returns HTTP status 200 on request. Threat intelligence sources flag the domain as a brand‑impersonation vector. AlienVault OTX contains one pulse referencing the domain, and Gridinsoft assigns a trust score of 0 out of 100. VirusTotal analysis shows that 9 of 95 security vendors have marked the domain as malicious. The domain appears on one public blocklist and is currently blocked by PhishDestroy. The risk level is listed as high, and the campaign is described as a cryptocurrency‑related scam. Defenders should incorporate suilens.tech into DNS and web filtering rules to prevent internal users from reaching the host. Continuous monitoring of the IP 92.112.193.140 and associated ASN is advised, as the infrastructure may be reused for additional impersonation activities. Incident response teams should treat any communications referencing the “Sui Package Visualizer” as potentially malicious and advise users to verify legitimate Sui channels. Updating threat feeds with the observed indicators—domain, IP, certificate fingerprint, and name server set—will improve detection across security platforms.