access-sui-walet[.]pages[.]dev

This domain, access-sui-walet.pages.dev, operates as a brand impersonation threat specifically targeting Sui cryptocurrency wallet users. Analysis indicates the site was designed to mimic legitimate Sui wallet interfaces, likely to harvest login credentials, private keys, or seed phrases from unsuspecting victims. The domain's infrastructure and content were crafted to exploit trust in the Sui brand, a common tactic in cryptocurrency phishing campaigns where financial theft is the primary objective. Technical evidence confirms the malicious nature of this domain. VirusTotal reports that 12 out of 95 security vendors flagged access-sui-walet.pages.dev as malicious, indicating widespread detection. The domain was registered on November 04, 2025, through Cloudflare, Inc., and resolves to the IP address 172.66.44.84, associated with Cloudflare's network (AS13335). It appears on at least one security blocklist, and Google Safe Browsing has explicitly flagged it as a phishing site. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as phishing domains frequently use valid certificates to appear legitimate. Users who visited access-sui-walet.pages.dev should take immediate action to mitigate potential risks. If any credentials, private keys, or seed phrases were entered on the site, they must be considered compromised. Affected users should transfer any funds from the associated wallet to a new, secure wallet immediately. Additionally, all passwords and security phrases linked to the compromised wallet should be changed, and multi-factor authentication should be enabled on all related accounts. Monitoring for unauthorized transactions and reporting the incident to relevant cryptocurrency security teams is strongly advised. The domain is currently offline, but users should remain vigilant for similar phishing attempts targeting Sui or other cryptocurrency platforms.