sui-wallet-extension[.]pages[.]dev

As of July 24, 2026, the domain sui-wallet-extension.pages.dev has been confirmed as a wallet/seed phishing site impersonating the brand 'across'. This domain was registered through Cloudflare, Inc. on February 21, 2026, and currently resolves to the IPv6 address 2606:4700:310c::ac42:2c40, which is associated with Cloudflare, Inc. in the United States (AS13335). The domain is currently offline and returns an HTTP status code of 403, indicating that access is forbidden. However, the offline status does not negate the threat, as the domain has been flagged for social engineering by Google Safe Browsing.

The SSL certificate for this domain is issued by Google Trust Services, which may provide a false sense of security to unsuspecting users. The domain has been detected by one security vendor, PhishDestroy, and appears on one security blocklist. The page title, 'Sui Wallet Extension – The Ultimate Tool for Seamless SUI Transactions', suggests that the site was designed to mimic a legitimate wallet extension, potentially targeting users of the SUI cryptocurrency. The Gridinsoft trust score for this domain is 0 out of 100, indicating a very high level of distrust.

Defenders should remain vigilant and ensure that users are aware of the risks associated with this domain, even if it is currently offline. Users should be advised to only download wallet extensions from official sources and to verify the authenticity of any wallet-related sites before providing sensitive information. The technologies detected on this domain include HSTS, Cloudflare, and HTTP/3, which may be used to enhance the site's credibility and functionality. While the domain is currently offline, it is recommended that it remains on watchlists and that any incidents of reactivation are promptly investigated and reported.