# allocation-suliend.xyz — SUSPICIOUS

> Exercise caution with allocation-suliend.xyz, a domain mimicking Solend. Avoid interaction to protect your credentials and assets from potential fraud.

## Summary
PhishDestroy has identified allocation-suliend.xyz as a medium-risk domain engaged in brand impersonation targeting Solend users. The domain’s page title, "Just a moment...", suggests an attempt to mimic legitimate loading or verification pages, commonly used in phishing schemes to deceive users into providing sensitive information. This impersonation campaign aims to exploit Solend’s brand reputation to harvest credentials or manipulate victims.

The domain was registered on March 7, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 188.114.97.3. It has been flagged by 3 out of 95 security vendors on VirusTotal and appears on 3 different security blocklists, indicating some level of suspicion. Gridinsoft rates its trustworthiness as 0 out of 100, reinforcing concerns about its legitimacy. Technical indicators suggest the domain was set up for fraudulent purposes related to Solend, a known DeFi protocol.

Currently, allocation-suliend.xyz is offline, reducing immediate risk. However, users are advised to remain vigilant and avoid interacting with similar suspicious domains. Organizations should update their blocklists to include this domain and monitor for any resurgence. Continual awareness and cautious behavior remain key in defending against evolving impersonation threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Target brand: Solend
- Page title: Just a moment...

## Domain Intelligence
- Registered: 2026-03-07 14:09:24
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: dakota.ns.cloudflare.com tara.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["Forcepoint ThreatSeeker", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/Mx6XrCdn/e73363d29cd2.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/38d5e002-2e30-4963-aee0-ec814653d0a5
- PhishDestroy: https://phishdestroy.io/domain/allocation-suliend.xyz/
- LLM endpoint: https://phishdestroy.io/domain/allocation-suliend.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/allocation-suliend.xyz/
Last updated: 2026-03-19