allocatlon-suilend[.]click
“Phase 2 Distribution”
Ringkasan bukti
PhishDestroy has identified a fraudulent website, allocatlon-suilend.click, that pretends to be associated with the Sui blockchain project. The page title read "Phase 2 Distribution," suggesting it was designed to trick users into believing they could claim a token distribution or airdrop. In reality, the site aimed to steal sensitive information like wallet credentials or private keys from unsuspecting visitors. This kind of brand impersonation is a common tactic used by cybercriminals to exploit the trust users have in legitimate crypto projects.
Our analysis uncovered several telling clues. The domain was registered on March 6, 2026, through NameSilo, LLC, and hosted on the IP address 172.67.148.220. VirusTotal flagged it with 1 out of 95 security vendors marking it as malicious, and it already appears on 3 security blocklists. Notably, the site lacked an SSL certificate, which is a standard security feature for any legitimate website—its absence is a major red flag. These indicators, combined with its recent creation and immediate takedown, strongly support the conclusion that this was a carefully crafted phishing operation targeting Sui enthusiasts.
If you visited allocatlon-suilend.click, especially if you entered any personal or wallet information, take immediate action. Change passwords for any accounts that may share the same credentials, and consider securing your crypto wallets by moving assets to a new wallet with a fresh seed phrase. Run a security scan on your device to check for malware. Finally, report the incident to the legitimate Sui team and your local cybercrime authorities. Staying vigilant against phishing domains like this one is crucial, and PhishDestroy remains dedicated to tracking and alerting the community to these threats.
Snapshot bukti yang dikirim
- Dikirim
- Catatan buku besar
- 1
- ID kasus
PD-20260306-F6EC7F- Judul halaman yang direkam
- Phase 2 Distribution
- Artefak PDF
- Bukti PDF
Teks bukti lengkap
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (US):
18 U.S.C. § 1343 - Wire Fraud
18 U.S.C. § 1030 - Computer Fraud and Abuse Act (CFAA)
15 U.S.C. § 45 - FTC Act (Deceptive Practices)
Federal laws prohibit wire fraud, computer fraud, and deceptive business practices.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | allocatlon-suilend.click |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 11/08/2026
8 sumber eksternal dipantau Tidak cocok
Linimasa deteksi
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
Laporan komunitas
Dilaporkan oleh 1 anggota komunitas; pertama terlihat 06/03/2026
- Laporan tersimpan
- 1
- URL unik yang dilaporkan
- 1
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive