deployers-allocation[.]xyz

This domain, deployers-allocation.xyz, is identified as a phishing resource targeting users of the BNKR platform, a decentralized finance protocol. Analysis indicates the site operates as a crypto asset drainer, designed to illicitly transfer digital assets from victims' wallets upon interaction. The page title, BNKR | Distribution, suggests an attempt to mimic legitimate token distribution or airdrop events, a common tactic to lure cryptocurrency holders into connecting their wallets to malicious smart contracts. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3, which has been flagged in prior malicious campaigns. Detection metrics indicate elevated risk: the domain appears on four security blocklists and is actively blocked by multiple wallet protection mechanisms. VirusTotal reports five out of ninety-five security vendors flagging the domain as malicious, a detection ratio that, while modest, aligns with targeted phishing operations designed to evade broad detection. As of the latest assessment, deployers-allocation.xyz has been taken offline, reducing immediate exposure risk. However, the domain's infrastructure remains registered and could be reactivated or repurposed for future campaigns. Users who interacted with the site are advised to revoke any connected wallet permissions and monitor for unauthorized transactions. The registrar's history of hosting malicious domains suggests continued vigilance is warranted, particularly for users engaged in decentralized finance activities. Organizations should update blocklists to include this domain and its associated indicators of compromise to mitigate residual risk.