allocate-rainbow[.]com

allocate-rainbow.com is currently offline and returns HTTP 404. The site was registered on 2025-12-04 through Dynadot LLC and is hosted behind Cloudflare (AS13335) with the IP address 188.114.96.3 located in the United States. DNS resolution uses the Cloudflare nameservers alexa.ns.cloudflare.com and randall.ns.cloudflare.com, and the service supports HTTP/3. The TLS certificate is issued by Google Trust Services under the WE1 root, indicating a valid HTTPS endpoint.

The page title observed in the last crawl is “Prime Budgeting Experts”, suggesting the site attempts to pose as a budgeting‑related service, although no additional branding is visible. VirusTotal scanned the domain and two of ninety‑five AV engines flagged it, and the domain is listed on a single public blocklist that is actively enforced by PhishDestroy. No further threat intelligence such as OTX or Safe Browsing references are available. The limited evidence points to a phishing‑type campaign that likely leverages the trusted Cloudflare infrastructure to increase credibility.

Because the site is offline, active exploitation cannot be confirmed at this time, but the presence on blocklists and the partial VirusTotal detections warrant continued monitoring. Defenders should block outbound connections to 188.114.96.3, add allocate‑rainbow.com to URL filtering policies, and keep the domain on watch lists for any re‑appearance. Additional analysis of the page content, if it resurfaces, would be required to determine the exact phishing vector and target audience.