allocation-telcoin[.]network
Allocation-telcoin.network was registered on August 26, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to the IP address 104.21.64.1, which is owned by Cloudflare, Inc. (AS13335) and geolocated in the United States. The site is currently offline and has been taken down by the operators of PhishDestroy and ScamSniffer. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, indicating a lack of confidence in the domain's legitimacy.
The domain appears on two external security blocklists, and VirusTotal analysis shows that two of ninety‑three scanning engines flagged the domain as malicious, reinforcing the suspicion of abusive use. The only visible HTTP artifact is the page title "Just a moment...", a generic placeholder that provides no indication of the intended target or content. An SSL certificate labeled "WE1" is present, but no further validation details are available. Collectively, the registrar information, Cloudflare hosting, low trust score, blocklist presence, and limited VirusTotal detections suggest that allocation-telcoin.network was employed for generic phishing or scam activity before being shut down.
Uncertainty remains regarding the specific phishing campaign, victim demographics, or any credential‑harvesting mechanisms that may have been hosted at the site, as no payload or page content has been captured. Defenders should continue to block the domain at network perimeter devices, monitor for any residual traffic to the associated IP address, and update detection signatures to include the observed indicators of compromise. Threat‑intel sharing platforms should be notified of the domain's registration details and the associated Cloudflare IP to aid in broader attribution efforts.
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive