hypersui[.]live

The domain hypersui.live was a cryptocurrency phishing site engaged in brand impersonation targeting Sui, a blockchain platform. It posed an elevated risk as a scam designed to deceive users into disclosing wallet credentials or sensitive information, though no drainer kit was confirmed. As of the latest verification, hypersui.live has been taken offline, but its prior activity warrants caution for those who may have interacted with it.

Technical analysis shows hypersui.live was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and SOCRadar, while appearing on 1 security blocklist (PhishDestroy). The domain was registered through NiceNIC International Group Co., Limited on February 21, 2026, and resolved to the IP address 172.67.175.223, hosted on Cloudflare’s infrastructure (AS13335) in the US. Its SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'Nur einen Moment…'. Technologies detected included Cloudflare, Cloudflare Browser Insights, and HTTP/3. Google Safe Browsing did not flag the domain at the time of assessment.

Users who visited hypersui.live should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. If credentials were entered, change passwords for associated accounts and enable two-factor authentication (2FA) where available. Monitor transaction histories for unauthorized activity and report the domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand’s security team for further mitigation.