allocate-bullishdegen[.]com

The domain allocate-bullishdegen.com is currently classified as a high‑risk generic phishing site and remains active as of 12 July 2026. It first appeared on a security blocklist and has been flagged by multiple threat‑intelligence sources. The site returns HTTP 403 responses, indicating that direct content retrieval is denied, but the presence of a page title “Un instant…” confirms that a web service is reachable.

Infrastructure analysis shows the domain resolves to the IPv6 address 2606:4700:3032::ac43:8485, which is hosted within a large content‑delivery network operating in the United States. The TLS certificate is signed by a widely trusted certificate authority and includes HSTS, HTTP/3, and browser‑insight capabilities, suggesting the use of modern security features. Nameservers are delegated to a pair of CDN‑controlled resolvers.

Detection evidence includes five detections out of ninety‑five scanners on a public malware aggregation platform, a trust score of 0 out of 100 from a security rating engine, and inclusion in a single public threat‑intel pulse. The domain was registered on 8 December 2025 through a registrar based in Hong Kong. It also appears on a known phishing‑blocking list, reinforcing the high‑risk assessment.

Defenders should treat any traffic to allocate-bullishdegen.com as malicious. Recommended actions are to block the domain at perimeter firewalls and DNS resolvers, monitor for outbound connections to the associated IPv6 address, and add the indicator to internal threat‑intel feeds. Continuous re‑evaluation is advised, as the site may evolve or host additional payloads.