sui-dao[.]xyz

As of July 29, 2026, sui-dao.xyz is under investigation for generic phishing activity. The domain was registered through NameSilo, LLC on July 2, 2026, and remains active, resolving to IP address 186.2.175.35. Its DNS infrastructure utilizes ns1.dnsowl.com, ns2.dnsowl.com, and ns3.dnsowl.com as nameservers. Notably, it appears on at least one security blocklist, having been blocked by PhishDestroy, which indicates that the domain has been flagged by at least one established anti-phishing provider.

VirusTotal scanned sui-dao.xyz against 91 vendors, with no current detections reported. However, the absence of detections should not be interpreted as evidence of safety—phishing domains may evade automated scans, and blocklist inclusion remains a significant indicator of potential threat. The domain's exact website content and targeting are not yet analyzed, and there is no evidence available regarding SSL certificates, HTTP status, or associations with specific brands or phishing kits. Further technical investigation is warranted to assess the full extent of any malicious activity.

Defenders should treat sui-dao.xyz with caution due to its recent creation, blocklist status, and ongoing activity. Network administrators are advised to monitor accesses to this domain and consider preemptive blocking as more threat intelligence becomes available. Users should avoid interacting with sui-dao.xyz until the investigation is complete and more details are published.