sui-mixer[.]com

This domain, sui-mixer.com, is identified as a brand impersonation threat targeting the Sui network. The domain claims to offer a SUI mixing service, which can be highly misleading and potentially dangerous for users who are seeking legitimate financial services related to the Sui cryptocurrency. The threat type is brand impersonation, and the specific brand target is Sui, which is a decentralized blockchain platform known for its high-performance and scalability.

Infrastructure analysis reveals that the domain has been flagged by 4 out of 95 security vendors on VirusTotal, indicating a low but notable level of suspicion. The domain is registered through NiceNIC International Group Co., Limited, and resolves to the IP address 172.67.129.155. It was created on May 13, 2025, and is currently listed on one security blocklist. The SSL certificate is issued by Google Trust Services / WE1, which may give a false sense of security to unsuspecting users. The domain has been taken offline, but the exact reason for its takedown is not specified.

The current status of sui-mixer.com is offline, which reduces the immediate risk to users. However, the domain's prior online presence and its listing on a security blocklist suggest that it may have been active in carrying out brand impersonation attacks. Response actions should include monitoring for any attempts to bring the domain back online and educating Sui users about the risks of visiting unverified websites that claim to offer mixing or tumbler services. The remaining risk is elevated due to the potential for the domain to be reactivated or for similar threats to emerge using different but similarly misleading domain names.