allocation-enosys[.]app

Domain allocation-enosys.app is currently under investigation for credential harvesting, a specific form of phishing designed to trick users into surrendering login credentials. The domain remains active at the time of writing. This domain was flagged by zero of ninety-five VirusTotal vendors, indicating that detection remains low despite potential malicious intent. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain resolves to IP address 188.114.96.3 and was created on April 28, 2026. It utilizes a Let’s Encrypt SSL certificate, which may lend an air of legitimacy to unsuspecting visitors. Notably, the domain has not yet been listed on major threat intelligence blocklists, suggesting it is either very new or deliberately evasive. Domain trust scores remain unverified due to the absence of historical telemetry and the lack of detections. Until further analysis is completed, allocate-enosys.app should be considered a potential threat vector for credential harvesting campaigns. Organizations are advised to block network traffic to the associated IP address 188.114.96.3 and to flag the domain at DNS and proxy levels. Users should avoid interacting with any login prompts or service-related pages hosted on this domain. Security teams are encouraged to monitor for any emerging intelligence or new detection signatures that may confirm malicious activity. Immediate action is warranted given the domain’s recent registration and the absence of preventative coverage from security vendors.