sitesuiteapp[.]wixstudio[.]com

This domain represents a high-risk brand impersonation threat specifically targeting users of the Sui cryptocurrency platform. Analysis indicates the site was designed to mimic legitimate Sui services, likely to harvest credentials, private keys, or other sensitive financial information from unsuspecting victims. The domain was hosted on Wix Studio infrastructure but has since been taken offline, though its previous activity remains a significant concern for users who may have interacted with it during its operational period.

Technical indicators confirm the malicious nature of this domain. The site was flagged by 12 out of 95 security vendors on VirusTotal, a notably high detection rate for a phishing resource. It was registered through GoDaddy.com, LLC, with a creation date of May 04, 2026—a future date that suggests the registration record may have been manipulated or backdated to evade detection. The domain resolved to the IP address 34.144.206.118 and was blocked by three security blocklists, including PhishDestroy, PhishingArmy, and OISD. Additional infrastructure analysis reveals the use of Wix, React, Google Cloud, and Google Cloud CDN, alongside a Let's Encrypt SSL certificate, which is commonly exploited by threat actors to lend a false sense of legitimacy to malicious sites.

Users who visited sitesuiteapp.wixstudio.com or interacted with any content hosted on this domain should take immediate action to mitigate potential risks. First, cease all interaction with the site and avoid clicking any links or downloading files associated with it. If credentials or private keys were entered, revoke access to any connected wallets or accounts immediately and monitor them for unauthorized transactions. Change passwords for all financial and cryptocurrency-related accounts, and enable multi-factor authentication where available. Additionally, scan the device used to access the site with updated security tools to detect any malware or persistent threats. Given the domain's high-risk classification and offline status, users should remain vigilant for follow-up phishing attempts via email or social engineering tactics.