6a1ce002c7e3970008520769--allora-claimdrop[.]netlify[.]app

This domain, hosted on Netlify and resolving to IP 63.176.8.218, is flagged as a crypto drainer threat with high risk. The page title 'Allora Prime' suggests association with a cryptocurrency or blockchain-related project, though the exact brand target has not been confirmed through provided intelligence. VirusTotal reports 3 of 91 security vendors flagging the domain, indicating moderate detection among security scanners. The domain is currently active and served an HTTP 200 status upon analysis. No nameservers were found, which is atypical for a legitimate Netlify-hosted site and may indicate recent configuration changes or attempts to evade detection. The domain registration through Netlify suggests the site was created using their free or paid hosting service, often exploited by threat actors for short-lived campaigns. Defenders should block access to this domain and IP address 63.176.8.218, monitor for related subdomains or variations, and investigate any user interactions for potential credential theft or cryptocurrency wallet compromise. The exact method of crypto draining (e.g., wallet connect, transaction signing) is not detailed in available data, but the threat type indicates direct financial loss risk. Organizations should treat this as an active threat and update blocklists accordingly.