papayawhip-lapwing-734022[.]hostingersite[.]com

Analysis of papayawhip-lapwing-734022.hostingersite.com shows the domain was created on 2026-03-06 through HOSTINGER Operations UAB and is currently taken offline. The HTTP response presents a parked‑domain page with the title “Parked Domain name on Hostinger DNS system”, indicating that the site is not serving active content. TLS is enabled via a Sectigo Limited certificate issued under the “Sectigo Public Server Authentication CA DV R36” profile, which is typical for domains hosted on Hostinger’s infrastructure.

DNS resolution points to 92.113.23.119, an address belonging to AS47583 Hostinger International Limited located in Cyprus, and the domain is delegated to Cloudflare nameservers emily.ns.cloudflare.com and terin.ns.cloudflare.com. Threat intelligence classifies the domain as a banking‑phishing campaign; it appears on two independent blocklists—PhishDestroy and ScamSniffer—and one of the 94 VirusTotal scanners flagged it (1 detection). No additional reputation data such as Safe Browsing, OTX, or other vendor feeds are cited, and the site’s content cannot be examined because the host is offline.

The convergence of a recent registration, a parked placeholder page, a valid SSL certificate, and placement on multiple phishing blocklists raises a high confidence that the domain was intended for credential‑harvesting against banking customers. Defenders should proactively block the domain and its resolved IP address in firewalls, web proxies, and endpoint security solutions, and consider adding the associated Cloudflare nameservers to watchlists. Ongoing surveillance of the Hostinger‑owned IP range is recommended, as adversaries may reuse the same infrastructure for future phishing deployments despite the current offline status.