honeyclusterx[.]com

honeyclusterx.com operates as a phishing portal under the guise of an 'Allocation & Claim Portal'. Despite being offline now, it was detected by PhishDestroy during its early stages, with 0 of 91 VirusTotal detections, highlighting its freshness and potential risk during the pre-propagation window. This domain exploits the typical 24-72 hour gap between registration and antivirus database updates, allowing it to target users before being flagged by traditional security measures.

The domain was registered with NICENIC INTERNATIONAL GROUP CO., LIMITED and hosted on an IP managed by Cloudflare, Inc. in the US. The SSL certificate was issued by Google Trust Services, adding a layer of deceptive legitimacy to the operation. The platform risk score of 58/100 indicates a moderate threat level, suggesting the potential for significant harm if the site had remained active.

The page title 'HoneyclusterX × RLUSD — Allocation & Claim Portal' suggests a financial scam aimed at tricking users into providing sensitive information under the pretense of claiming funds. The domain is now included in one public blocklist, specifically PhishDestroy's, which underscores the importance of early detection in mitigating phishing threats. The takedown of honeyclusterx.com prevents further exploitation, but its initial activity serves as a reminder of the need for continuous monitoring and rapid response to emerging threats.