allora-network[.]xyz

Allora-network.xyz was observed serving a web resource whose HTTP response returned the title “Index of /”, indicating an exposed directory listing rather than a dedicated landing page. The domain resolves to 95.214.235.117, an address owned by Virtual Systems LLC in Ukraine (AS30860). No TLS certificate is presented, meaning the site was only reachable over HTTP, which is typical for low‑effort phishing infrastructure. The registrar listed for the domain is NiceNIC International Group Co., Limited and the domain was created on 14 November 2025, less than a year before detection, a pattern consistent with fast‑flux or throwaway phishing sites.

Reputation services have flagged the domain: VirusTotal recorded detections by ten of ninety‑five scanners, PhishDestroy and ScamSniffer list it as blocked, and two additional blocklists contain the host. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment. The authoritative name servers are ns13.v-sys.org and ns14.v-sys.org, both hosted by the same provider that supplies the hosting IP. The site’s current status is offline, but the historical evidence confirms that it was used for phishing activity.

Defenders should continue to deny any traffic to 95.214.235.117, add the domain and its IP to local deny lists, and monitor for re‑registration or similar aliases using the same name‑server pattern. Further investigation of request logs from the hosting provider may reveal additional malicious payloads or victim targets. At present, the lack of SSL, the directory‑listing page title, and the multiple vendor detections provide sufficient confidence to treat the domain as a confirmed phishing threat.