launch[.]sui-web[.]io

This domain, launch.sui-web.io, is actively flagged as a high-risk cryptocurrency scam impersonating the Sui blockchain platform. Analysis indicates the domain was registered on February 21, 2026, through a hosting provider and is currently resolving to the IP address 104.21.80.1, which is associated with Cloudflare's infrastructure in the United States. The domain is served by Cloudflare nameservers julio.ns.cloudflare.com and wren.ns.cloudflare.com, and it employs Cloudflare Browser Insights alongside HTTP/3, a configuration commonly observed in both legitimate and malicious deployments. The site returns an HTTP 403 status, suggesting access restrictions or a defensive posture to evade automated analysis. Its page title, 'Just a moment...,' is consistent with Cloudflare's interstitial challenge pages, which may indicate an attempt to filter or delay scrutiny. The domain appears on at least one security blocklist and is flagged by five out of ninety-five security vendors in a multi-engine scan, reinforcing its classification as malicious. A trust score of 0 out of 100 further corroborates its high-risk status. While the exact content and functionality of the site remain unconfirmed due to access restrictions, the available evidence—including its registration details, infrastructure, and detection by security vendors—strongly suggests it is designed to deceive users into interacting with fraudulent cryptocurrency services. Defenders should treat this domain as an active threat, blocking resolution at the DNS or network level and monitoring for related indicators of compromise. The use of Cloudflare does not inherently indicate legitimacy, as threat actors frequently leverage its services to obscure malicious activity. Further investigation into associated wallet addresses, redirects, or linked domains is recommended to assess the full scope of the campaign.