trazor-walet-hrdware-io[.]pages[.]dev

This report details a malicious domain impersonating the Sui cryptocurrency brand to facilitate a wallet credential theft campaign.

The site, hosted at trazor-walet-hrdware-io.pages.dev, presents itself with the title "Getting Started with Your Hardware Wallet Suite: A Step-by-Step Guide." It poses as a legitimate Sui hardware wallet setup guide. The primary threat is cryptocurrency theft, where users are tricked into entering their wallet seed phrases or private keys, which are then harvested by the attacker.

Technical analysis confirms the malicious nature of the domain. VirusTotal reports 11 detections out of 95 security vendors. The domain was registered on 2026-03-23 through Cloudflare, Inc., and resolves to IP address 172.66.47.59, located in Canada and also belonging to Cloudflare, Inc. The SSL certificate is issued by Google Trust Services (WE1). The domain is flagged by multiple security vendors including ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, and ESET, and appears on one blocklist. The domain risk score is 78 out of 100, and the GridinSoft trust rating is 0 out of 100.

The site is currently offline. Based on the high risk score and multiple vendor detections, this domain presents a critical threat to users. It is strongly advised to block all traffic to this domain and warn users against visiting it or entering any credentials.