creteportwaysuisse[.]live

This domain, creteportwaysuisse.live, is actively impersonating the Sui blockchain platform as part of a confirmed phishing operation. Registered on May 15, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the site presents itself as an official AI-assisted trading platform under the fabricated brand 'Crête Portway Suisse.' The page title, 'Crête Portway Suisse | Official Platform for AI Assisted Trading,' directly misleads users into believing it is affiliated with Sui, a known cryptocurrency project. Analysis indicates the domain is still operational, returning an HTTP 200 status and resolving to the IP address 188.114.96.3, which is hosted by CloudFlare in Canada. Infrastructure analysis reveals the use of Cloudflare nameservers (rob.ns.cloudflare.com and selah.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns. The SSL certificate, issued by Let's Encrypt (serial number E7), provides HTTPS encryption but does not validate the legitimacy of the site. Security vendors have flagged the domain, with 3 out of 95 engines on VirusTotal detecting malicious activity, and it appears on at least one security blocklist. Additionally, AlienVault OTX has recorded the domain in a threat intelligence pulse, further corroborating its malicious classification. The domain's trust score, rated 0 out of 100 by Gridinsoft, aligns with its confirmed status as a phishing site targeting Sui users. While the exact phishing kit or payload remains unconfirmed, the combination of brand impersonation, recent registration, and low detection rates suggests a targeted campaign. Defenders should prioritize blocking this domain at the DNS and proxy levels, as well as monitoring for related infrastructure, such as the resolved IP address and Cloudflare nameservers. Given the domain's active status and high-risk classification, users should be warned against interacting with any content hosted on creteportwaysuisse.live or associated subdomains.