sui-walletextension[.]pages[.]dev

This domain, sui-walletextension.pages.dev, poses as a legitimate Sui wallet extension to deceive users into entering sensitive credentials or private keys. Brand impersonation phishing sites like this one often mimic official interfaces to trick victims into disclosing authentication details, which attackers then use to drain cryptocurrency wallets or gain unauthorized access to accounts. The site specifically targets users of the Sui blockchain, exploiting trust in the brand to facilitate financial theft or identity compromise. Analysis indicates the domain was registered on October 29, 2025, through Cloudflare, Inc., and is hosted on infrastructure belonging to the same provider (AS13335). At the time of detection, 12 out of 95 security vendors on VirusTotal flagged the domain as malicious, with Google Safe Browsing and PhishDestroy also classifying it as phishing. The SSL certificate, issued by Google Trust Services (WE1), resolves to the IP address 172.66.47.66, located in the United States. The domain appears on at least one security blocklist, and its page title was explicitly labeled 'Suspected phishing site | Cloudflare,' further confirming its fraudulent nature. If you visited sui-walletextension.pages.dev or interacted with its content, immediate action is required to mitigate risk. First, disconnect any devices that accessed the site from networks and external storage to prevent lateral movement of potential malware. Next, revoke any permissions granted to browser extensions or applications linked to the domain and reset credentials for all accounts associated with the Sui ecosystem, including wallet passwords and recovery phrases. Monitor financial accounts and blockchain transactions for unauthorized activity, and consider using a hardware wallet or cold storage for enhanced security. Report the incident to relevant security teams or fraud reporting platforms to assist in broader threat mitigation efforts.