slush[.]pages[.]dev

This domain, slush.pages.dev, is actively flagged as a high-risk cryptocurrency scam impersonating the Sui blockchain platform. Infrastructure analysis reveals the domain was registered on January 30, 2025, through Cloudflare, Inc., and currently resolves to the IPv6 address 2606:4700:310c::ac42:2f5e, hosted on Cloudflare's network (AS13335) in the United States. The domain is blocked by at least one security blocklist, and four out of ninety-five security vendors on VirusTotal have detected malicious activity associated with it, reinforcing its classification as a threat. The page title 'Vibra' does not match the known brand target, Sui, which suggests an attempt to obscure the site's true purpose while still leveraging the Sui name for credibility. The domain employs standard web technologies such as Twitter integration, HSTS, Google Analytics, and HTTP/3, which are not inherently malicious but are commonly used in both legitimate and fraudulent sites to appear authentic. The SSL certificate is issued by Google Trust Services, a reputable provider, which does not mitigate the domain's fraudulent intent but may help evade basic security filters. What remains uncertain is the exact mechanism of the scam, as the site's content has not been fully analyzed. However, given the domain's classification as a cryptocurrency scam and its impersonation of Sui, it is likely designed to deceive users into transferring funds or revealing sensitive credentials. Defenders should treat this domain as an active threat and implement blocking measures at the DNS or network level. Security teams are advised to monitor for additional indicators of compromise, such as wallet addresses or redirect chains, which may emerge as the campaign evolves. The domain's continued operation as of July 12, 2026, indicates an ongoing risk requiring immediate attention.