sui-wallet-extnsonn[.]typedream[.]app
“Sui Wallet Extension™ | Your Gateway to Secure Web3 on the Sui Blockchain”
sui-wallet-extnsonn.typedream.app — 콘텐츠를 사용할 수 없음. 브랜드 사칭: Sui; 사기 유형: Crypto Scam. 증거 요약: VirusTotal 11/95 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, CRDF); PhishDestroy score 83/100. 등록기관: Cloudflare.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
Analysis as of July 24 2026 indicates that the domain sui-wallet-extnsonn.typedream.app is hosted on Cloudflare infrastructure (IP 172.67.206.36, AS13335, United States). The domain was registered through Cloudflare, Inc. and resolves to a Cloudflare edge node that serves content over HTTPS using a Google Trust Services certificate (issuer WE1). Although the TLS certificate is valid, it does not verify the legitimacy of the site. The site returns HTTP 404, confirming that the content is currently unavailable, and the domain has been taken offline. The page title retrieved from the HTTP response is “Sui Wallet Extension™ | Your Gateway to Secure Web3 on the Sui Blockchain”, directly referencing the Sui brand and suggesting a cryptocurrency wallet extension.
The domain is classified as a crypto‑related brand impersonation, targeting users of the Sui blockchain. VirusTotal scans show that eleven of ninety‑five security vendors flagged the domain, indicating a moderate detection consensus. The domain appears on one security blocklist and is listed as blocked by PhishDestroy, reinforcing its malicious reputation. Infrastructure fingerprints reveal a modern web stack: Node.js, React, Next.js, Google Cloud services (CDN, Trace) and Cloudflare Browser Insights, consistent with a typical impersonation‑hosting environment that leverages reputable CDNs to obscure the origin.
Nameserver information could not be retrieved (NS_NOT_FOUND), limiting visibility into DNS authority and complicating attribution. No additional content analysis is available beyond the page title; therefore the exact malicious payload, credential‑harvesting mechanisms, or transaction‑draining behavior remain unverified. Defenders should continue to block the IP address 172.67.206.36 and the domain itself at network perimeter, update endpoint and web‑filtering solutions with the observed indicators, and monitor for newly registered subdomains under the typedream.
위협 대응 Pipeline
공개 차단 목록 상태
사용 기술 · 10 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 신뢰도 100%React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 신뢰도 100%Next.js is a React framework for developing single page Javascript applications.
nextjs.org 신뢰도 100%Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.
cloud.google.com 신뢰도 100%Cloud CDN uses Google's global edge network to serve content closer to users.
cloud.google.com 신뢰도 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 신뢰도 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 신뢰도 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 신뢰도 100%VirusTotal 분석
보관된 증거
증거 및 외부 보고서
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.