topinfozinp[.]info

Analysis indicates that the domain topinfozinp.info was registered on April 14 2026 through the registrar Spaceship, Inc. The domain resolves to the IP address 165.232.97.192, which is hosted by DigitalOcean, LLC in the United Kingdom. Cloudflare authoritative nameservers jim.ns.cloudflare.com and daphne.ns.cloudflare.com are configured for the zone, suggesting the use of a CDN or DNS protection service. The domain appears on a single security blocklist and is actively listed by PhishDestroy, confirming that it has been identified as malicious by at least one external threat‑sharing platform.

VirusTotal reports that 14 of 94 scanning engines flag the domain as malicious, providing independent corroboration of its suspicious nature. No public page title or brand target has been disclosed, and the site has been taken offline at the time of reporting, limiting direct observation of its content. The lack of a disclosed brand or page title means that the specific victim lure cannot be confirmed, but the classification of “generic phishing” aligns with the observed indicators.

Defenders should continue to block the domain at the network perimeter, add the IP address 165.232.97.192 to host‑based deny lists, and monitor for any resurgence of activity. Ongoing watch‑list updates from the blocklist and PhishDestroy feed are recommended, as well as periodic re‑scanning of the domain should it become reachable again. The combination of recent registration, rapid detection by multiple vendors, and association with a known phishing blocklist elevates the risk posture of this infrastructure.