walrus[.]city

PhishDestroy identifies walrus.city as an elevated risk domain engaged in brand impersonation, specifically targeting the Sui blockchain project. This domain poses a concrete threat by masquerading as an official Walrus claiming portal, likely designed to harvest users' wallet credentials or private keys through a fake airdrop or token claim interface. The domain's sole purpose appears to be deceiving Sui community members into believing they are interacting with a legitimate protocol.

Technical analysis reveals multiple red flags: VirusTotal reports that 8 out of 95 security vendors flag this domain as malicious. The domain was registered on February 21, 2026, and resolves to IP address 76.76.21.98. It uses an R13 SSL certificate and appears on one security blocklist. The page title is explicitly "Walrus Claiming Portal," which directly mimics the branding of Walrus, a storage protocol built on Sui. Despite being taken offline, the domain's infrastructure and historical data remain concerning.

Users who may have interacted with walrus.city should immediately revoke any permissions granted to the site and change passwords for associated accounts. Since this is a brand impersonation attack, the safest course is to only use official channels—such as the verified Sui Foundation website or official Walrus documentation—for any token claims or protocol interactions. Enabling two-factor authentication and monitoring wallet activity for unauthorized transactions are also critical steps. PhishDestroy recommends reporting any similar domains to the Sui team and avoiding clicking on unsolicited links promoting claims or airdrops.