slush-wallet-sui[.]typedream[.]app

This domain is flagged for brand impersonation targeting Sui, a blockchain network, by presenting itself as a legitimate wallet application. Analysis indicates the site mimics the Sui wallet interface to deceive users into entering sensitive credentials, such as private keys or recovery phrases, which could lead to unauthorized access to digital assets. The threat is classified as elevated due to the direct financial risk posed to visitors who may unknowingly disclose critical authentication details. Infrastructure analysis reveals the domain resolves to the IP address 188.114.97.3, hosted under AS13335 (Cloudflare, Inc.), and is registered through the same provider. The SSL certificate is issued by Google Trust Services, a common but not exclusive indicator of legitimacy. However, the domain is flagged by 9 out of 95 security vendors on VirusTotal, and appears on one security blocklist, specifically PhishDestroy. The page title, 'Slush — A Sui wallet - Apps,' further confirms the intent to mislead users by adopting branding elements associated with Sui. Users who visited slush-wallet-sui.typedream.app should immediately revoke any permissions granted to the site within their wallet applications. If credentials were entered, they must transfer assets to a new wallet with a fresh seed phrase and monitor accounts for unauthorized transactions. Browser data, including cookies and cached files, should be cleared to remove any residual tracking mechanisms. Given the domain’s current offline status, users should remain vigilant for similar impersonation attempts targeting blockchain infrastructure, particularly those leveraging Cloudflare-hosted domains with high-risk indicators.