atnm[.]allocation[.]digital

Analysis of atnm.allocation.digital shows that the domain was registered on 21 February 2026 and is presently taken offline. The site presented the page title “Autonoma Network | Airdrop”, indicating a fake airdrop lure. The underlying infrastructure resolves to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. A single security vendor on VirusTotal flagged the domain out of a total of 93 scanners, and the domain appears on one public blocklist, confirming that at least one security service has identified it as malicious. The site was also listed by the PhishDestroy blocklist.

Reputation scoring from Gridinsoft assigned a trust score of zero out of one hundred, reflecting a highly suspicious classification. The SSL certificate presented the identifier “WE1”, which does not correspond to a recognized certificate authority, further suggesting a low‑quality or self‑signed deployment. The observed phishing kit is labeled “Airdrop Scam”, matching the “Fake Airdrop” scam type recorded in the intelligence. The domain is noted to impersonate the brand “across”, although no visual evidence of brand misuse is available in the current data set. Uncertainty remains regarding the specific tactics employed on the site, such as credential capture forms or malicious payload delivery, because the page content has not been captured.

The limited number of vendor detections may indicate early stage deployment or evasion techniques, and the single blocklist entry suggests that broader community awareness is still developing. Defenders should add 188.114.96.3 to network‑level deny lists, enforce DNS filtering for atnm.allocation.digital, and monitor for any future resolution changes. Updating endpoint and web gateway signatures with the “Airdrop Scam” kit fingerprint can improve detection.