suiwalletdrainer[.]pages[.]dev

The domain suiwalletdrainer.pages.dev is a cryptocurrency phishing site engaged in brand impersonation targeting Sui, a blockchain platform. It poses an elevated risk by attempting to deceive users into interacting with malicious wallet-draining mechanisms, though no specific drainer kit was identified. As of the latest verification, suiwalletdrainer.pages.dev has been taken offline, but prior activity indicates it was actively used for scams.

Technical indicators confirm the domain was flagged by 2 of 95 VirusTotal security vendors, including ChainPatrol and alphaMountain.ai. It was registered through Cloudflare, Inc. on May 12, 2025, and resolved to the IP address 104.21.48.1, hosted by Cloudflare in the US. The domain appeared on one security blocklist (PhishDestroy) and was not flagged by Google Safe Browsing. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Worker threw exception | suiwalletdrainer.pages.dev | Cloudflare'. Technologies detected included HSTS, Cloudflare, and HTTP/3, with nameservers kenia.ns.cloudflare.com and apollo.ns.cloudflare.com.

Users who interacted with suiwalletdrainer.pages.dev should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials or private keys were exposed, change passwords and enable two-factor authentication on all related accounts. Report the domain to the impersonated brand (Sui) and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts.