allocations-grove[.]xyz

This domain, allocations-grove.xyz, is flagged as a high-risk generic phishing threat targeting blockchain users. Analysis indicates the site impersonates Flare, a legitimate blockchain platform, as evidenced by the page title 'Flare: The blockchain for data.' The infrastructure appears designed to deceive users into interacting with fraudulent smart contracts or wallet-drainer scripts, though no specific drainer kit has been conclusively identified in this instance. Infrastructure analysis reveals the domain resolves to IP address 104.21.4.201 and is secured with an SSL certificate issued by Google Trust Services. The domain was registered on June 28, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. VirusTotal detection metrics report 5 out of 95 security vendors flagging the domain as malicious. No entries were found in Google Safe Browsing at the time of analysis, and blocklist monitoring indicates minimal propagation across threat intelligence feeds. The domain remains active as of the latest verification, posing an ongoing risk to users. Response actions should include immediate blocklisting at the network and endpoint levels, along with monitoring for related domains registered through the same registrar. The remaining risk is classified as high due to the domain's active status, low detection rate, and association with blockchain phishing, which often targets high-value assets. Users are advised to verify domain authenticity through official channels before interacting with any blockchain-related prompts.