loopy-sui[.]ai-cryptolist[.]net

The domain loopy-sui.ai-cryptolist.net is currently active and has been identified as a credential phishing site that impersonates the Sui brand. The site presents the page title "Suspected Misleading Website | Cloudflare" and returns an HTTP 403 status code, indicating that direct content retrieval is blocked. The domain was registered on April 11, 2026 through Key-Systems GmbH and resolves to the IP address 172.67.198.248, which belongs to Cloudflare, Inc. and is geolocated to Canada. SSL is provided by Google Trust Services under the WE1 certificate, confirming the use of a valid TLS certificate. Nameservers listed are melissa.ns.cloudflare.com and miles.ns.cloudflare.com, further confirming Cloudflare hosting. VirusTotal scans show 18 of 94 security vendors flagging the domain, and Gridinsoft assigns a trust score of 0 out of 100. The domain appears on a single security blocklist and is blocked by PhishDestroy. While the page content has not been directly examined, the combination of brand impersonation, credential phishing classification, and multiple security detections indicates a high‑risk threat. Defenders should block the domain at network perimeter, monitor DNS queries for the domain and its associated IP, and advise users to avoid any unsolicited requests for Sui credentials. Additional investigation should focus on any payloads or credential collection mechanisms that may be hosted behind the Cloudflare protection.