nav-trazr-suite[.]pages[.]dev

This domain was identified as a brand impersonation threat targeting users of the Sui blockchain platform. The site mimicked legitimate Sui wallet interfaces to deceive visitors into entering sensitive credentials, such as private keys or recovery phrases, which could lead to unauthorized access and theft of digital assets. The fraudulent nature of the domain is evident through its design, which closely resembled official Sui branding, increasing the likelihood of successful social engineering attacks against unsuspecting users. Analysis indicates the domain was registered on November 03, 2025, through Cloudflare, Inc., and resolved to the IPv6 address 2606:4700:310c::ac42:2c91, hosted on Cloudflare’s infrastructure (AS13335). Security vendors flagged the domain in VirusTotal, with 17 out of 95 engines detecting malicious activity. Additionally, the domain appeared on two security blocklists, including PhishDestroy and PhishingDB, further confirming its involvement in phishing operations. The SSL certificate, issued by Google Trust Services (WE1), did not mitigate the risk, as the domain’s content remained malicious. Users who visited nav-trazr-suite.pages.dev should assume their credentials or sensitive information may have been compromised. Immediate actions include revoking access to any connected wallets or accounts, generating new private keys, and monitoring for unauthorized transactions. If financial assets were involved, affected parties should report the incident to relevant blockchain security teams and law enforcement. Additionally, reviewing browser history and clearing cached data can help mitigate residual risks from the exposure. Organizations should update their blocklists to include this domain and its associated indicators of compromise to prevent future access.