allinoursite[.]com

Analysis of the domain allinoursite.com indicates it was a generic phishing infrastructure flagged by multiple security mechanisms. The domain, registered on September 29, 2023, through NameCheap, Inc., resolved to the IP address 216.172.109.187, hosted on AS13354 (zColo) in the United States. At the time of assessment, the domain was offline, with an HTTP status of 200 recorded prior to takedown, suggesting it was actively serving content before being disabled. The page title, matching the domain name itself ('allinoursite.com'), provides no explicit indication of a targeted brand or service, limiting attribution to a specific phishing campaign.

Security vendor detections were notable but not unanimous: 12 of 93 engines on VirusTotal flagged the domain as malicious, while AlienVault OTX listed it in one threat intelligence pulse. The domain appeared on a single blocklist (PhishDestroy) and received critically low trust scores from Scamadviser (1/100) and Gridinsoft (38/100). The absence of an SSL certificate further aligns with common phishing tactics, as encrypted connections are often omitted in low-effort malicious setups. Nameservers were provided by registrar-servers.com, a common infrastructure choice for domains registered via NameCheap.

While the domain’s exact content remains unanalyzed, the combination of low trust scores, blocklist inclusion, and security vendor detections supports its classification as a generic phishing threat. Defenders should treat this domain as compromised infrastructure and monitor for re-registration or related domains using the same IP or registrar. Historical DNS logs and proxy data may reveal additional connections to other malicious campaigns. Given its offline status, further forensic analysis would require access to archived content or network traffic captures from the period of activity.