suiet-tg[.]pages[.]dev

suiet-tg.pages.dev targets cryptocurrency users by impersonating the Sui brand. Despite being offline now, it was detected early in the phishing lifecycle, with no VirusTotal detections at the time of discovery. This highlights the domain's freshness and the advantage of PhishDestroy's upstream threat detection capabilities. The site was listed in three public blocklists, including those maintained by PhishDestroy, MetaMask, and SEAL.

The domain was registered through Cloudflare, Inc., and hosted on an IP address associated with Cloudflare in the United States. The SSL certificate was issued by Google Trust Services, indicating a level of sophistication in the setup. The phishing operation leveraged the early registration of the domain to exploit the typical 24-72 hour gap before antivirus databases are updated, thus evading immediate detection by most security tools.

Although the site is currently taken down, its initial setup using Vite, React, and TypeScript suggests a targeted approach to deceive users familiar with cryptocurrency platforms. The platform risk score of 60 out of 100 reflects a moderate threat level, emphasizing the importance of early detection in preventing potential financial losses. The domain's takedown does not negate the risk it posed during its active period, underscoring the need for continuous monitoring and swift action against such phishing attempts.