thehellplisuippostmanaga-ccemteraoutroompageidiae[.]sbs

This domain is assessed as presenting an elevated risk due to its use in a brand impersonation campaign targeting Sui. Analysis indicates that the infrastructure was configured to imitate a legitimate service, using the page title "Business Help Center" to appear credible. Such infrastructure is commonly deployed to deceive users into disclosing credentials, authentication information, or other sensitive data. Although the domain is currently offline, its prior use and technical indicators remain relevant for threat intelligence and retrospective investigations.

Evidence supporting this assessment includes detection by 18 of 95 security vendors on VirusTotal. The domain was registered through Atak Domain and created on December 22, 2024. It resolved to IP address 172.67.211.157, located in the US under AS13335 Cloudflare, Inc. No SSL certificate was observed. The domain appeared on 1 security blocklist and has been taken offline. These indicators are consistent with infrastructure associated with brand impersonation campaigns and provide measurable evidence supporting the elevated-risk classification.

Users who accessed this domain before it was taken offline should consider any credentials or sensitive information entered as potentially exposed. Passwords associated with affected accounts should be changed immediately, multi-factor authentication should be enabled where available, and account activity should be reviewed for unauthorized access. Security teams should block the domain and associated indicators across DNS, web filtering, email, and endpoint controls, retain the observed indicators for incident response, and monitor for related domains or infrastructure that may reuse the same tactics or branding.