ranchimallsuiwallet[.]pages[.]dev

On July 23, 2026, the domain ranchimallsuiwallet.pages.dev was flagged for brand impersonation, specifically targeting the cryptocurrency brand Sui. The domain is currently offline and has been taken down. This domain has a page title of 'SUI Wallet,' which aligns with the brand impersonation threat. The domain resolves to the IP address 172.66.46.228, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The infrastructure analysis reveals that the domain is registered through Cloudflare, Inc., and uses nameservers adi.ns.cloudflare.com, karl.ns.cloudflare.com, tina.ns.cloudflare.com, and will.ns.cloudflare.com.

The site employs HSTS (HTTP Strict Transport Security), Cloudflare services, and HTTP/3, indicating a focus on security and performance, which can sometimes be used to lend credibility to fraudulent sites. The SSL certificate for the domain is issued by Google Trust Services, further enhancing the appearance of legitimacy. However, the HTTP status code 403 indicates that access to the site is forbidden, which is consistent with the domain being taken offline. The domain appears on one security blocklist and has been flagged by PhishDestroy, a reputable security service. Gridinsoft's trust score for this domain is 0 out of 100, the lowest possible, which strongly suggests that it is a high-risk site.

Defenders should be aware that the domain has been used in a crypto scam and should ensure that it remains blocked in their security configurations. Despite the domain being offline, it is advisable to monitor for any attempts to re-register or re-launch the site, as crypto scams often re-emerge with slight variations. The domain was created on September 2, 2020, which provides additional context on its longevity and potential for misuse.