eligible-suilend[.]org

The domain eligible-suilend.org is a phishing site engaged in brand impersonation, specifically targeting Discord users with an airdrop scam. It presents itself as a legitimate Discord-related promotion under the title 'Phase 2 Distribution' but is designed to deceive victims into disclosing sensitive information or interacting with fraudulent schemes. No crypto drainer kit was identified in this campaign. The site is currently taken offline, though it previously posed an elevated risk to users.

Technical indicators confirm the malicious nature of eligible-suilend.org. The domain was flagged by 2 of 95 security vendors on VirusTotal, including G-Data and SOCRadar, and appears on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. It was registered on March 10, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 104.21.2.252, hosted by Cloudflare, Inc. (AS13335) in the US. The site used Cloudflare services and HTTP/3 but had no SSL certificate. Nameservers were jimmy.ns.cloudflare.com and martha.ns.cloudflare.com. Gridinsoft assigned it a trust score of 0/100, reinforcing its classification as a scam.

Users who interacted with eligible-suilend.org should immediately change any passwords associated with Discord or other accounts, enable two-factor authentication (2FA), and monitor for unauthorized activity. If cryptocurrency transactions were attempted, revoke any token approvals and consider moving funds to a new wallet. Report the domain to Discord’s security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to help prevent further abuse.