Is sui-dao.pro a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

SUI-DAO.pro is a single-page decentralized-finance portal titled "SuiDAO — Sui Network DAO, DEX & DeFi Hub | Swap, Stake, Govern On-Chain." It presents itself as a hub for the Sui blockchain ecosystem, offering token swapping, staking and on-chain governance voting. The apparent business model is a DeFi service that would draw visitors into transacting with crypto-assets. The page carries a large amount of text content.

Scam/Impersonation Risk

Confirmed contradictory signals are present. The domain is blacklisted. Multiple independent security engines flag it as malicious, including several tier-one security vendors, and a further group of engines marks it suspicious. The detections are domain-level and are not attributed to shared infrastructure. They are sufficient to place the site in an elevated-risk category regardless of its otherwise tidy technical presentation. The homepage borrows the identity of a prominent blockchain network and the vocabulary of a governance organization ("DAO," "govern on-chain"). Nothing in the evidence independently ties the operator to the real Sui ecosystem or to any known organization. The site is also absent from the DeFi protocol directories that normally recognize established platforms. A DeFi hub that invites swaps, staking and governance participation is exactly the kind of lure used to steer users into connecting wallets or signing transactions. This pattern is consistent with brand-adjacent crypto-fraud infrastructure. It is not itself proof of a specific scheme. No conflicting legal identities were observed, because the site publishes no competing entity names. The sandbox did not observe wallet-connection prompts, clipboard tampering, hidden forms, cloaking or external data transmission. Those observations are mitigating but do not outweigh the external detections. Evidence:

• Homepage: Eleven security engines return malicious verdicts and three return suspicious verdicts, including Fortinet, Kaspersky and Sophos.
• Homepage: The title and positioning ("Sui Network DAO, DEX & DeFi Hub") invoke an established blockchain brand, and no verifiable link to its real operators is shown.
• Domain provenance: Registered 2026-07-30 (~0.24 years old, about three months), through the registrar Atak Domain Bilgi Teknolojileri A.Ş.
• Archive history: 1 archive snapshot, from 2026 (first and last seen 2026-08-03), so there is no prior history.

Regulatory Verification Notes

The captured page content was not analyzed for legal-entity, licensing or corporate-registration disclosures, so the on-site disclosure position is unclear. No regulated status is established for the operator, and no third-party broker or regulatory record matched the site. Financial functions such as swaps and staking would ordinarily warrant clear operator identification and jurisdictional disclosure. That standard is unmet here because no independently confirmed operator exists. Any identity claims the site makes should not be taken as established fact. The transport-layer and hosting artifacts below are logged as technical context only. They do not corroborate legitimacy. Evidence:

• Site transport encryption: The TLS certificate is issued by YR1 at domain-validation (DV) level only, valid to 2027-01-19. This confirms encryption but not who operates the site.
• Hosting infrastructure: Served from AS59692 (IQWEB - IQWeb FZ-LLC, UAE).
• Homepage: No regulator, license number or registered operating entity could be associated with the site.

What to Verify Next

Any claim of affiliation with the Sui ecosystem should be checked against the official channels published by the genuine project, reached independently and not through links on this site. Staking, swap or governance participation should be confirmed through those official channels and not through this domain. The confirmed operating entity, if any, should be matched to a regulator or registry record before any interaction involving funds. The official support and contact channels should also be confirmed through an independent, offline route. If a wallet has already been connected to this site, existing token approvals should be reviewed and revoked. Evidence:

• Homepage: The swap, stake and governance functions are advertised without any identified accountable operator.
• Domain provenance: The domain has an observable lifespan of only a few months, so no track record exists against which to measure its claims.
• Security detections: The domain is currently listed by multiple security engines, so reputation should be re-checked before any reassessment.

Summary Verdict

The overall posture is high risk. Confirmed external threat detections, a brand-adjacent DeFi pitch and a very young domain with no prior history converge on a cautionary assessment. The absence of observed malicious behavior in sandbox testing does not offset these findings. Apparent technical hygiene does not establish that the operator is trustworthy.

Infrastructure Integrity

The site resolves to a single IP address at IQWeb FZ-LLC, a data-center hosting provider in the United Arab Emirates. No CDN or WAF layer is in place, so the infrastructure offers no protective mitigation. Multiple abuse reports have been filed against this IP. They are attributed to a provider IP that may be shared, and they were not discounted. They therefore reinforce, but do not independently establish, the external detections noted earlier.

Closing Assessment

The site should be limited to read-only viewing at most. Wallets should not be connected, transactions or signatures should not be approved, credentials should not be entered, and funds should not be deposited, until the operator is independently verified and the security listings are cleared.

Signals weighed against the site

• AbuseIPDB: 6 reports on hosting IP 186.2.175.35 (IQWeb FZ-LLC, Data Center/Web Hosting/Transit), 11% confidence. The reports are attributed to shared infrastructure, not specifically to this website.