# rewards-allora.network — MALICIOUS — Crypto Drainer (Angel Drainer)

> Stay alert! The domain rewards-allora.network is linked to a crypto drainer scheme. Avoid interaction to protect your digital assets and privacy.

## Summary
PhishDestroy classifies rewards-allora.network as a medium-risk crypto drainer domain. Although currently offline, its prior activity poses a moderate threat to users involved in cryptocurrency transactions.

This domain resolved to IP address 104.21.94.102 and was identified using the Angel Drainer kit, a known tool for illicit crypto fund extraction. It appeared on multiple security blocklists and was registered through Cloudflare, Inc. VirusTotal analysis flagged it by a subset of security vendors, indicating suspicious behavior consistent with phishing and crypto draining activities.

Users are advised to avoid accessing rewards-allora.network and related URLs. Organizations should maintain updated blocklists and educate users about such threats. Continuous monitoring and swift takedown actions remain critical to mitigate risks from similar crypto-focused phishing infrastructures.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Angel Drainer)
- Site status: dead (HTTP 403)
- Drainer type: Angel Drainer
- Page title: Allora Network

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 104.21.94.102
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: benedict.ns.cloudflare.com stella.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 5 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "CyRadar", "Fortinet", "Seclookup"]
- Google Safe Browsing: clean
- Blocklists: 4 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a72e9-c925-776d-92f4-70b509682bbc.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/5067ac94-85e0-4574-b35d-e5cac489e7ae
- PhishDestroy: https://phishdestroy.io/domain/rewards-allora.network/
- LLM endpoint: https://phishdestroy.io/domain/rewards-allora.network/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rewards-allora.network/
Last updated: 2026-03-19