en-suii-wallet-download[.]pages[.]dev

Analysis indicates that en-suii-wallet-download.pages.dev is an active brand-impersonation site targeting users interested in Sui cryptocurrency wallets. The domain was registered on 22 Feb 2026 and resolves to Cloudflare IP 172.66.44.59 (AS13335, United States). It returns HTTP 200 responses, enforces HSTS, and operates over Cloudflare’s HTTP/3 stack with a Google Trust Services / WE1 TLS certificate. The only observable content is a page title “5 Best Sui Wallets To Store SUI Crypto Coins In 2025”, suggesting an attempt to lure victims by presenting a curated list of wallet recommendations. The domain is listed on three security blocklists and is actively blocked by MetaMask, PhishDestroy, and SEAL. VirusTotal scans have flagged the domain by 2 of 95 vendors, and Gridinsoft assigns a trust score of 0 / 100, reinforcing its malicious classification. No additional infrastructure such as C2 servers or malware payloads has been observed. Defenders should continue to block the domain at network perimeters, update DNS‑based blacklists, and monitor for similar subdomains under the *.pages.dev namespace that reference Sui or wallet terminology. Ongoing observation is recommended to capture any evolution of the site’s content or hosting configuration.