sui-alkimi[.]firebaseapp[.]com

This domain, sui-alkimi.firebaseapp.com, poses a high-risk brand impersonation threat targeting users of the Sui blockchain platform. Analysis indicates the domain mimics legitimate Sui asset management interfaces, presenting a page titled 'Alkimi X Sui - Swap, Manage & Explore Sui Assets.' The intent is to deceive users into interacting with fraudulent smart contract functions, wallet connections, or credential submission forms, potentially leading to unauthorized asset transfers or account compromise. The domain leverages blockchain-related terminology to enhance credibility, exploiting the trust associated with decentralized finance (DeFi) platforms. Infrastructure analysis reveals the domain resolves to IP address 198.18.1.43, hosted on AS54113 (Fastly, Inc.) in the United States. It is registered through Google LLC and secured with an SSL certificate issued by Google Trust Services (WR4). VirusTotal detection metrics show 1 out of 95 security vendors flagging the domain as malicious. The domain appears on 1 security blocklist and remains active at the time of this report. No historical registration data or creation date is provided, but the use of a Firebase subdomain suggests recent deployment to evade detection. Users who have visited sui-alkimi.firebaseapp.com or interacted with its content should immediately revoke any connected wallet permissions and audit their transaction history for unauthorized activity. If credentials or private keys were entered, affected accounts must be migrated to new wallets, and all associated assets should be transferred to secure addresses. Monitor connected devices for additional malware or unauthorized access attempts. Report the domain to relevant security teams or blockchain platforms to aid in broader mitigation efforts. Avoid interacting with any further communications or links associated with this domain.