sui-wallet-extension-app[.]typedream[.]app

This domain operates as a brand impersonation scheme targeting users of the Sui blockchain ecosystem. Analysis indicates the site mimics the official Sui Wallet interface, presenting itself as "Sui Wallet: Your Gateway to the Sui Blockchain Ecosystem" to deceive visitors into interacting with malicious smart contracts or disclosing sensitive credentials. The threat primarily involves crypto asset theft, where victims may unknowingly authorize transactions that drain their wallets through fraudulent prompts or fake extension downloads. The domain’s infrastructure and content are designed to exploit trust in the Sui brand, a high-value target in the decentralized finance space. Infrastructure analysis reveals multiple indicators of malicious activity. The domain resolves to IP address 188.114.96.3, hosted on Cloudflare’s network (AS13335), a common obfuscation tactic used to mask true origins. Security vendors on VirusTotal have flagged the domain as malicious, with 12 out of 95 engines detecting it as a threat. The domain is registered through Cloudflare, Inc., and appears on at least one security blocklist, further corroborating its fraudulent nature. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as legitimate certificates are frequently abused in phishing campaigns to lend false credibility. Users who visited this domain should take immediate action to mitigate potential compromise. Any interactions, such as connecting a wallet or entering seed phrases, may have exposed private keys or enabled unauthorized transactions. Affected individuals should revoke all active smart contract approvals associated with the Sui network using a trusted wallet interface. Additionally, they should monitor their wallet activity for unfamiliar transactions and consider transferring assets to a new, secure wallet if compromise is suspected. Browser extensions or software downloaded from this domain should be removed, and systems scanned for malware to prevent further exploitation.