# allocatlon-suilend.xyz — SUSPICIOUS

> Allocatlon-suilend.xyz shows signs of phishing activity. Exercise caution and avoid sharing personal info until investigation concludes.

## Summary
Allocatlon-suilend.xyz has been identified as a domain exhibiting potential phishing threats, currently labeled under generic phishing with a risk level marked as under investigation. This designation reflects concern over possible fraudulent attempts to deceive users into divulging sensitive information. Although no active detections have yet been flagged by VirusTotal or other security vendors, the domain’s suspicious use patterns warrant close scrutiny to prevent user harm.

Technically, allocatlon-suilend.xyz is hosted on IP address 104.21.41.38 and was registered recently on March 7, 2026 through PublicDomainRegistry.com, a domain registrar often used by threat actors due to lenient verification processes. Despite zero detections from automated engines, the domain’s newly created status combined with its registration details contribute to a higher risk profile. Ongoing monitoring and correlation with emerging threat intelligence sources remain essential.

At present, the domain remains active and under active investigation by PhishDestroy analysts. Users are strongly advised to refrain from interacting with the site or submitting any personal or financial information. Organizations should consider blocking or flagging this domain in email filters and security gateways until its intent can be conclusively determined. Continued vigilance and timely threat intelligence updates will be critical to mitigating potential phishing impacts related to allocatlon-suilend.xyz.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Target brand: Sui
- Page title: Just a moment...

## Domain Intelligence
- Registered: 2026-03-07 13:07:01
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 104.21.41.38
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["cosmin.ns.cloudflare.com", "bristol.ns.cloudflare.com"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["alphaMountain.ai", "Forcepoint ThreatSeeker", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/G4jcdxch/04ce098fb6bd.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/2d17c50c-2430-4381-ac17-2d2b4574c70b
- Wayback Machine: https://web.archive.org/web/https://allocatlon-suilend.xyz
- PhishDestroy: https://phishdestroy.io/domain/allocatlon-suilend.xyz/
- LLM endpoint: https://phishdestroy.io/domain/allocatlon-suilend.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/allocatlon-suilend.xyz/
Last updated: 2026-03-19