airdrop[.]fight-foundation[.]digital

PhishDestroy identifies the domain airdrop.fight-foundation.digital as a currently active brand impersonation threat targeting the Sui ecosystem.

This domain poses as a Sui-themed airdrop portal and is under active investigation for impersonation of the official Sui brand. The site currently resolves to IP address 172.67.196.163 and holds a valid Let's Encrypt SSL certificate, increasing its perceived legitimacy. Despite its suspicious nature, the domain remains undetected by VirusTotal, with 2 out of 95 security vendors flagging it at this time. This low detection rate suggests a newly emerged or stealthily operated threat that has not yet been widely analyzed or blacklisted.

Technical indicators reveal this impersonation domain was created with the intent to deceive users into connecting cryptocurrency wallets or submitting private keys under the guise of claiming Sui airdrops. The IP hosting the site is associated with Cloudflare, a common hosting provider used to obfuscate origin servers and evade takedown efforts. While no registrar information or creation date is available in the provided dataset, the combination of a fresh SSL certificate, low VirusTotal detection (2/95), and active impersonation of a major blockchain brand indicates a high-risk threat with potential for rapid escalation.

Users are strongly advised to avoid interacting with this domain or any links associated with airdrop.fight-foundation.digital. Never connect wallets, enter seed phrases, or provide private keys to unverified websites claiming to offer Sui airdrops. If exposure has occurred, immediately revoke any connected permissions and transfer assets to a new wallet. Report this domain to your browser’s security team, Sui’s official support channels, and blockchain fraud reporting platforms such as Chainalysis or CipherTrace. Organizations should monitor network traffic for connections to 172.67.196.163 or domains containing 'fight-foundation'.