sui-web3[.]site

The domain sui-web3.site was identified as a brand impersonation threat targeting the Sui blockchain platform. Analysis confirms the domain operated as a phishing site, currently marked as offline. The page title observed during active monitoring was 'Web Server's Default Page,' suggesting either incomplete deployment or deliberate obfuscation of malicious intent. Infrastructure analysis reveals the domain was registered through AfriRegister on August 17, 2025, and resolved to the IP address 95.216.38.171. Security vendor detections include 6 of 95 flags on VirusTotal, while Gridinsoft assigned a trust score of 0/100. The domain appears on five distinct security blocklists and has been actively blocked by multiple threat intelligence platforms, including Polkadot, Codeesura, PhishDestroy, ScamSniffer, and Enkrypt. Current status indicates the domain has been taken offline, though residual risks may persist. Organizations are advised to verify DNS and proxy logs for connections to 95.216.38.171 or the domain name. Blocklist integration is recommended for proactive defense, and users should be alerted to potential credential theft or wallet-draining attempts linked to this infrastructure. Monitoring for re-registration or similar domains under the same registrar is advised.