# robo-allocations.xyz — SUSPICIOUS

> robo-allocations.xyz, a low-risk phishing domain impersonating ROBO Distribution, has been taken offline. Stay alert and avoid interacting with this site.

## Summary
PhishDestroy has identified robo-allocations.xyz as a low-risk phishing domain impersonating ROBO Distribution. Although the site was taken offline, it previously posed a threat by attempting to deceive users into revealing sensitive information. The domain appeared legitimate with a page titled "ROBO | Distribution," but was flagged on multiple security blocklists, signaling potential malicious intent.

This phishing attempt involved setting up a convincing facade that mimicked ROBO Distribution’s branding to trick visitors into submitting personal or login credentials. The domain, registered recently through NiceNIC International Group Co., Limited, resolved to an IP address linked with suspicious activity. Despite only one security vendor on VirusTotal flagging it, the presence on four security blocklists highlights the domain’s dubious nature.

If you have visited robo-allocations.xyz, it’s crucial to remain cautious. Avoid entering any personal or financial data on similar sites, and monitor your accounts for unusual activity. Running a security scan on your device and changing passwords related to ROBO Distribution or similar services is recommended. Reporting suspicious domains helps protect the broader community from phishing threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: ROBO | Distribution

## Domain Intelligence
- Registered: 2026-03-06 15:07:01
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.200.137
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: merlin.ns.cloudflare.com nancy.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 4 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/S7BjzBrK/872694c2a9f1.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/robo-allocations.xyz
- PhishDestroy: https://phishdestroy.io/domain/robo-allocations.xyz/
- LLM endpoint: https://phishdestroy.io/domain/robo-allocations.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/robo-allocations.xyz/
Last updated: 2026-03-19