tangem[.]suitechecker[.]io

This domain, tangem.suitechecker.io, is identified as a brand impersonation threat targeting users of the Sui blockchain platform. Analysis indicates the site mimics Tangem’s transaction verification interface, presenting a page titled 'Tangem - Transaction Check' to deceive victims into interacting with malicious smart contracts or disclosing private keys. The intent is likely to facilitate unauthorized access to cryptocurrency wallets, enabling asset theft through techniques such as crypto draining or credential harvesting. The domain’s infrastructure and design closely resemble legitimate Sui-related services, increasing the likelihood of successful social engineering attacks against unsuspecting users. Evidence supporting this assessment includes multiple technical indicators. The domain resolves to IP address 136.243.231.49, hosted on AS24940 (Hetzner Online GmbH) in Germany, and is secured with a Let’s Encrypt SSL certificate (R13). It was registered on February 21, 2026, through Porkbun LLC, a registrar frequently associated with malicious domains. VirusTotal detection metrics show 18 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The combination of recent registration, brand impersonation, and elevated detection rates underscores the domain’s elevated risk profile. Users who visited tangem.suitechecker.io should take immediate action to mitigate potential compromise. Disconnect any active wallet sessions linked to the domain and revoke permissions for all suspicious smart contracts using a trusted blockchain explorer. Conduct a full audit of transaction history for unauthorized transfers, particularly those involving Sui or related assets. Reset credentials for any accounts accessed during the interaction, enable multi-factor authentication where available, and monitor for signs of further exploitation, such as unexpected login attempts or phishing communications. If private keys or recovery phrases were entered, consider migrating assets to a new wallet, as the existing one may be permanently compromised.