xusdbridge[.]suihub[.]net

The domain xusdbridge.suihub.net is an active cryptocurrency phishing site engaged in brand impersonation targeting Sui, a blockchain platform. It presents itself as a legitimate bridge or wallet service to deceive users into disclosing sensitive credentials or transferring funds, though no drainer kit has been confirmed. As of the latest verification, xusdbridge.suihub.net remains active and poses an elevated risk to users searching for Sui-related services.

Technical indicators confirm the domain's suspicious nature. xusdbridge.suihub.net is flagged by 3 of 95 security vendors on VirusTotal, including ChainPatrol, alphaMountain.ai, and SOCRadar. It appears on one security blocklist, PhishDestroy, and is registered through HOSTINGER operations, UAB, with a creation date of November 12, 2024. The domain resolves to IP address 84.32.84.33, hosted under AS47583 (Hostinger International Limited) in Lithuania, and currently returns an HTTP 403 status with the page title 'Your domain is expired'. No SSL certificate is present, and the nameservers are ns1.dns-expired.com and ns2.dns-expired.com. Google Safe Browsing has not flagged the domain.

Users who interacted with xusdbridge.suihub.net should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords on all associated accounts and enable two-factor authentication. Report the phishing domain to the impersonated brand (Sui) and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts.