allday-collection[.]com

Analysis of allday-collection.com indicates that the domain was registered on July 15, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolving to the Cloudflare edge address 188.114.97.3. The authoritative name servers are lilyana.ns.cloudflare.com and rick.ns.cloudflare.com, confirming that the domain is hosted behind Cloudflare’s CDN and DDoS mitigation services. The domain appears on one security blocklist and is explicitly blocked by PhishDestroy, suggesting that at least one external threat intelligence source has identified it as malicious. VirusTotal reports that the domain has been scanned by 95 antivirus or URL‑reputation vendors, none of which returned a detection at the time of analysis; the absence of a detection does not constitute evidence of safety, particularly given the recent creation date and the blocklist entry. No public SSL certificate details, HTTP response codes, page title, or content analysis have been published, leaving the payload and luring technique of the campaign unknown. The short lifespan of the domain, combined with its placement on a phishing‑related blocklist, aligns with patterns commonly observed in generic phishing operations that rely on fast‑flux or disposable domains. Defenders should consider adding 188.114.97.3 and the domain name to URL filtering and DNS‑based block policies, monitor for any future detections in additional reputation services, and, where possible, enforce outbound traffic controls to prevent credential submission to the site. Continuous re‑evaluation is advised, as the domain may acquire additional indicators such as malicious payloads, phishing page signatures, or victim reports.