sui-wallet-downlad-eng[.]pages[.]dev

This domain is flagged as an elevated-risk phishing infrastructure specifically designed for brand impersonation targeting Sui, a cryptocurrency wallet service. Analysis indicates the site was engineered to deceive users into disclosing wallet credentials or downloading malicious software under the guise of legitimate Sui wallet updates or installations. Infrastructure analysis reveals the domain sui-wallet-downlad-eng.pages.dev was registered through Cloudflare, Inc. and has since been taken offline. It was created on April 09, 2026, and resolved to the IP address 188.114.97.3. The SSL certificate is issued by Google Trust Services. The domain appears on three security blocklists and is actively blocked by multiple security providers. Detection metrics include a VirusTotal score of 1/95 security vendors flagging the domain as malicious, alongside a Gridinsoft trust score of 0/100. The page title was identified as 'Suspected phishing site | Cloudflare,' further confirming its fraudulent nature. Mitigation steps for this threat type include immediate blocking of the domain and associated IP address (188.114.97.3) at the network perimeter. Users who may have interacted with the domain should revoke any active sessions, rotate credentials, and scan systems for unauthorized access or malware. Organizations should monitor for indicators of compromise, such as unexpected outbound connections to the resolved IP or related infrastructure. Security teams are advised to update detection rules to include this domain and its associated indicators in threat intelligence feeds to prevent future exposure.