cetusbridge[.]org

cetusbridge.org was registered on August 07, 2025 through Tucows Domains Inc. The domain resolves to the IPv6 address 2606:4700:3032::6815:139b, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. DNS resolution is handled by the Cloudflare authoritative nameservers ophelia.ns.cloudflare.com and george.ns.cloudflare.com. The site presents the page title “Cetus – Empower liquidity. Built for DeFi.” and carries an SSL certificate identified as WE1.

Although the page title references a DeFi service, threat intelligence labels the domain as a crypto‑scam that impersonates the brand “sui”. The domain is listed on five security blocklists – PhishDestroy, ScamSniffer, Polkadot, Enkrypt and Codeesura – and VirusTotal records indicate that 12 of 93 scanning engines flagged the site as malicious. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence of malicious intent. Current network probing shows the domain is taken offline, but historical data confirm the presence of the malicious infrastructure.

Analysts should continue to block the domain at perimeter defenses, monitor for any re‑registration or related sub‑domains, and correlate any inbound traffic to the associated Cloudflare IP with known malicious activity. Because the domain mimics a legitimate DeFi brand while targeting the sui ecosystem, any credential or wallet address requests originating from this host should be treated as compromised. Ongoing intelligence gathering is recommended to verify whether the site previously hosted phishing pages or cryptocurrency drainers, and to update detection signatures accordingly.