claim[.]iika[.]run

The domain claim.iika.run was registered on February 21, 2026 and currently resolves to the IP address 104.21.64.1, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site presented the page title “Ika TGE Portal” and is associated with a crypto‑related scam, specifically a brand impersonation of the cryptocurrency platform sui. An SSL certificate identified as WE1 is in use, indicating that TLS is active but provides no evidence of legitimate ownership.

VirusTotal analysis shows that one out of ninety‑three scanning vendors flagged the domain, and the domain appears on a single security blocklist. PhishDestroy has also listed the domain as blocked. The domain’s operational status is reported as offline at the time of assessment, which may indicate that the malicious payload has been removed or the hosting has been taken down.

However, the presence of a Cloudflare‑proxied IP, a valid TLS certificate, and a flagged vendor detection suggest that the infrastructure was deliberately crafted to appear legitimate and to evade simple blocklist checks. Defenders should continue to monitor the IP address 104.21.64.1 for any re‑activation of malicious content, enforce strict outbound filtering for connections to this host, and add claim.iika.run to internal blocklists for brand‑impersonation and crypto‑scam categories. Additional telemetry, such as DNS query logs and any future HTTP response content, would be required to confirm whether the domain reappears or is repurposed for other malicious campaigns.