suiwalletextension[.]pages[.]dev

The domain suiwalletextension.pages.dev has been identified as a brand impersonation threat specifically targeting the Backpack brand. This domain, which is currently offline, was designed to deceive users into believing it is the official Sui Wallet Extension, as indicated by its page title "Sui Wallet Extension — Official Browser Extension." The threat type is brand impersonation, with a risk level of elevated, meaning it posed a significant risk to users who may have encountered it while active.

Technical analysis reveals that this domain was registered through Cloudflare, Inc. and resolves to the IP address 172.66.44.149. It was created on October 17, 2025, and has an SSL certificate issued by Google Trust Services (WE1). VirusTotal flagged it with 3 out of 95 security vendors marking it as malicious. Google Safe Browsing also flagged it as phishing. The domain appears on one security blocklist, indicating limited but confirmed recognition of its malicious nature. The unique seed for this analysis is 1a6a1b.

The domain is now offline, but users should remain vigilant. PhishDestroy recommends that anyone who interacted with suiwalletextension.pages.dev should immediately check their crypto wallets for unauthorized transactions and avoid reusing passwords. Always verify the authenticity of browser extensions by visiting the official website directly rather than clicking on links. For further protection, use PhishDestroy's verification tools to check suspicious domains before engaging with them.