check-eligibility-allocation[.]live

This domain is flagged as an elevated-risk brand impersonation threat targeting WordPress. Analysis indicates the infrastructure was designed to mimic legitimate WordPress services, likely to deceive users into disclosing credentials, installing malicious plugins, or interacting with fraudulent allocation or eligibility verification pages. The domain exhibits multiple technical indicators consistent with phishing operations, including a default page title that suggests incomplete or placeholder deployment prior to takedown. Infrastructure analysis reveals the domain was registered on January 02, 2026, through HOSTINGER operations, UAB, and resolves to the IP address 84.32.84.2. It is currently offline but was detected by 2 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The domain appears on three security blocklists and is actively blocked by MetaMask, SEAL, and PhishDestroy. The creation date, while future-dated, may reflect a registration error or an attempt to evade temporal-based detection mechanisms. Mitigation steps for this threat type include blocking the domain and its associated IP at the network perimeter, updating endpoint protection rules to flag any attempts to access it, and monitoring for related subdomains or newly registered lookalike domains. Organizations should review logs for connections to 84.32.84.2 and audit user activity for interactions with WordPress-themed phishing lures. Security teams are advised to treat any future registrations under similar naming patterns (e.g., eligibility-check, allocation-verify) as high-risk and prioritize proactive takedown requests.