# allora.website — MALICIOUS — Crypto Drainer (Wallet Connect Abuse)

> Beware of allora.website, a crypto drainer domain now offline. Learn how it targets wallets and what to do if you’ve visited.

## Summary
PhishDestroy identifies allora.website as a medium-risk crypto drainer domain that was used to steal cryptocurrency from unsuspecting users. This site, known as 'Allora Network,' was designed to lure victims into compromising their wallet security, posing a serious threat to digital asset owners.

The phishing technique employed involves abusing Wallet Connect, a popular protocol for connecting cryptocurrency wallets to decentralized applications. Visitors to allora.website were tricked into granting access to their wallets, allowing attackers to drain funds stealthily. The domain was registered in late 2025 and has since been taken offline after appearing on multiple security blocklists.

If you have visited allora.website, it is critical to immediately check your wallet for unauthorized transactions and revoke any suspicious permissions granted via Wallet Connect. Changing passwords and enhancing wallet security measures, including using hardware wallets and enabling multi-factor authentication, are strongly recommended to prevent further compromise.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Wallet Connect Abuse)
- Site status: dead (HTTP 403)
- Drainer type: Wallet Connect Abuse
- Page title: Allora Network

## Domain Intelligence
- Registered: 2025-11-11 03:01:30
- Expires: 2026-11-11 23:59:59
- Registrar: NameCheap, Inc.
- Country: US
- IP: 198.54.120.162
- IP Country: US
- IP City: Phoenix
- IP Org: AS22612 Namecheap, Inc.
- Nameservers: dns1.namecheaphosting.com dns2.namecheaphosting.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["alphaMountain.ai", "Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a72e9-7792-7528-bac7-1de873503df7.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/b3034a61-f8a7-482e-980d-b76994c1cbfd
- PhishDestroy: https://phishdestroy.io/domain/allora.website/
- LLM endpoint: https://phishdestroy.io/domain/allora.website/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/allora.website/
Last updated: 2026-03-19