allocation-suliend[.]sbs

This domain, allocation-suliend.sbs, is actively impersonating Solend, a decentralized finance protocol, to deceive users into interacting with fraudulent smart contracts or disclosing sensitive credentials. Analysis indicates the site is designed to mimic legitimate Solend interfaces, likely deploying a crypto drainer mechanism to siphon digital assets from victims' wallets upon connection. The infrastructure is engineered to exploit trust in the Solend brand, potentially leading to unauthorized transactions or account takeovers. Evidence supporting this assessment includes detection by 10 out of 95 security vendors on VirusTotal, with the domain appearing on three independent security blocklists. Registered on February 28, 2026, through NameSilo, LLC, the domain resolves to the IP address 172.67.155.134 and employs Cloudflare for content delivery and obfuscation. The page title 'Just a moment...' suggests the use of anti-bot or anti-analysis techniques, a common tactic in phishing infrastructure to delay or prevent automated scrutiny. Users who have visited allocation-suliend.sbs or interacted with its content should immediately revoke any connected wallet permissions and cease all interactions with the domain. It is recommended to audit recent transactions for unauthorized activity and monitor connected accounts for signs of compromise. If credentials or wallet access were provided, users should transfer assets to a new, secure wallet and report the incident to relevant security teams or community alert systems. Proactive measures, such as verifying domain authenticity and scrutinizing transaction prompts, are critical to mitigating risks associated with brand impersonation threats.