jhwhnq[.]site

Analysis of the domain jhwhnq.site indicates it was registered on February 21, 2026, and is associated with generic phishing activity. As of July 24, 2026, the domain resolves to IP address 194.36.191.196, hosted in the Netherlands under AS60117 (Host Sailor Ltd). The SSL certificate is classified as R12, and the observed page title is 'Index of /', suggesting an exposed directory listing rather than a polished phishing landing page. No specific brand impersonation or targeted scam type is identified in available data, and the exact content of the site remains unanalyzed.

Two of 93 security vendors on VirusTotal flagged this domain at the time of assessment. It appears on one security blocklist and was blocked by PhishDestroy. Gridinsoft assigns a trust score of 0/100, reinforcing the elevated risk classification. The domain is currently offline, limiting further real-time inspection.

Defenders should treat this domain as potentially malicious based on its hosting infrastructure, low detection but non-zero vendor flags, and presence on blocklists. Network-level blocking of 194.36.191.196 and monitoring for any re-emergence of jhwhnq.site or related subdomains is recommended. No evidence links this domain to a specific phishing kit, campaign, or targeted brand, so generic phishing detection rules should be applied.