federalism[.]org

The domain federalism.org is currently active and serves a page titled “Supporting Public Understanding of Federalism | CSF”. DNS resolution points to IP 198.12.252.201, hosted by GoDaddy.com, LLC, with authoritative nameservers ns61.domaincontrol.com and ns62.domaincontrol.com. The site presents a valid GoDaddy Secure Certificate Authority – G2 TLS certificate issued by GoDaddy.com, Inc. Email routing is configured via Microsoft 365 protection (federalism-org.mail.protection.outlook.com). HTTP requests receive a 200 OK response. Infrastructure evidence shows the domain has been referenced in two AlienVault OTX threat pulses and is listed on a single security blocklist. PhishDestroy has actively blocked the domain. VirusTotal analysis, performed by 91 scanning engines, returned no detections; the absence of detections does not constitute assurance of benign intent. The current classification is “generic phishing”, though no payload or credential‑capture page has been publicly disclosed. Given the observed infrastructure and blocklist activity, defenders should treat federalism.org as a potential phishing vector. Recommended actions include adding the domain and its hosting IP to outbound and inbound filtering rules, monitoring MX traffic for anomalous use, and continuing periodic scanning with multiple sandbox services. Further investigation is required to determine whether the live page hosts credential‑harvesting forms or redirects to malicious content.