allington-advisors[.]com

Allington-advisors.com was registered on 23 June 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to IP 89.169.55.63, an address owned by xorek.cloud International LTD and geolocated to Germany. DNS is served by Cloudflare (adrian.ns.cloudflare.com, tony.ns.cloudflare.com). The site presents a valid TLS certificate issued by Let’s Encrypt (YR1), and HTTP requests return status code 200. Passive fingerprinting identifies Nginx as the web server and Bootstrap as the front‑end framework. Threat intelligence classifies the domain as a credential‑phishing site. Five of ninety‑one AV engines on VirusTotal have flagged the host, and Gridinsoft assigns a trust score of 0 / 100. The domain appears on a single security blocklist and is currently blocked by PhishDestroy. No further content analysis is available beyond the page title “Allington Investment Advisors – Home”, which suggests the site may be impersonating a financial advisor brand. Given the recent creation date, the low trust score, and multiple vendor detections, the infrastructure is consistent with a high‑risk phishing operation. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the associated IP and Cloudflare name servers, and consider adding the host to internal blacklists. Additional investigation of the site’s payloads and any credential‑harvesting endpoints is recommended to confirm the full attack vector.