staring-trezosuite[.]wixstudio[.]com

This domain, staring-trezosuite.wixstudio.com, operates as a brand impersonation threat specifically targeting users of the Sui blockchain platform. Analysis indicates the site was designed to mimic legitimate Sui wallet interfaces, likely to deploy crypto drainer scripts that automatically siphon digital assets from connected wallets. The threat extends to users who interact with the domain by entering wallet credentials or approving malicious transactions, which could result in immediate and irreversible asset loss without requiring additional user confirmation. Infrastructure analysis reveals multiple high-confidence indicators of compromise. The domain was flagged by 11 out of 95 security vendors on VirusTotal, with detections including wallet drainer signatures and brand impersonation patterns. It appears on 5 security blocklists, including MetaMask's threat intelligence feed and PhishingArmy's real-time monitoring system. The domain was registered through GoDaddy.com, LLC and currently resolves to IP address 34.144.206.118, though it has since been taken offline. The SSL certificate was issued by Let's Encrypt, a common characteristic of short-lived malicious domains that attempt to appear legitimate through encryption. Users who visited staring-trezosuite.wixstudio.com should immediately revoke any wallet connections made to the site and transfer assets to a new wallet address. All transactions approved through this domain should be considered compromised, and users should monitor their wallet activity for unauthorized transfers. If credentials were entered, the affected wallet should be treated as permanently compromised, and all associated seed phrases or private keys should be migrated to a new secure wallet. Security teams should add the domain and IP address 34.144.206.118 to network blocklists, and monitor for any attempts to re-establish communication with this infrastructure using the unique seed identifier 1c7fb4.