allocatlon-suilend[.]click

PhishDestroy has identified a fraudulent website, allocatlon-suilend.click, that pretends to be associated with the Sui blockchain project. The page title read "Phase 2 Distribution," suggesting it was designed to trick users into believing they could claim a token distribution or airdrop. In reality, the site aimed to steal sensitive information like wallet credentials or private keys from unsuspecting visitors. This kind of brand impersonation is a common tactic used by cybercriminals to exploit the trust users have in legitimate crypto projects.

Our analysis uncovered several telling clues. The domain was registered on March 6, 2026, through NameSilo, LLC, and hosted on the IP address 172.67.148.220. VirusTotal flagged it with 1 out of 95 security vendors marking it as malicious, and it already appears on 3 security blocklists. Notably, the site lacked an SSL certificate, which is a standard security feature for any legitimate website—its absence is a major red flag. These indicators, combined with its recent creation and immediate takedown, strongly support the conclusion that this was a carefully crafted phishing operation targeting Sui enthusiasts.

If you visited allocatlon-suilend.click, especially if you entered any personal or wallet information, take immediate action. Change passwords for any accounts that may share the same credentials, and consider securing your crypto wallets by moving assets to a new wallet with a fresh seed phrase. Run a security scan on your device to check for malware. Finally, report the incident to the legitimate Sui team and your local cybercrime authorities. Staying vigilant against phishing domains like this one is crucial, and PhishDestroy remains dedicated to tracking and alerting the community to these threats.