wenbsui-wallet[.]pages[.]dev

The domain wenbsui-wallet.pages.dev was registered on November 10, 2025 and is currently offline. Infrastructure analysis shows the domain resolves to IP address 172.66.47.65, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The domain is delegated to the Cloudflare nameservers edward.ns.cloudflare.com and ivy.ns.cloudflare.com, and the SSL certificate presented is issued by Google Trust Services under the WE1 designation. HTTP responses return a 403 status code, and the service advertises HSTS and HTTP/3 support, indicating a modern web stack.

The page title captured from the site reads "SuiWallet Platform | Reliable Wallet for Blockchain Assets," aligning with the reported scam type of wallet or seed phishing and the brand impersonation of Sui. Detection telemetry indicates that 12 of 95 security vendors on VirusTotal flagged the domain, and it appears on a single security blocklist. The domain has been explicitly blocked by the PhishDestroy service. A Gridinsoft trust score of 0 out of 100 further underscores the malicious assessment.

While the site is no longer reachable, the combination of a brand‑specific page title, a low trust score, multiple vendor detections, and blocklist inclusion provides strong evidence that the domain was used to solicit cryptocurrency wallet credentials from victims. Defenders should continue to monitor for any resurgence of the domain or related subdomains, enforce outbound filtering to block connections to the resolved IP address, and ensure that endpoint protection solutions incorporate the observed VirusTotal detections. Additional mitigation steps include updating internal phishing blocklists with the domain and educating users about unsolicited wallet login prompts that reference Sui, as the threat actor appears to have leveraged the brand's reputation to increase credibility.