hcwjcope[.]poundbahis[.]com

The domain hcwjcope.poundbahis.com is currently listed as active malicious infrastructure supporting a generic phishing campaign. According to open‑source threat feeds the domain appears on a single security blocklist and is actively blocked by the PhishDestroy service. VirusTotal scans show that 14 of 91 security vendors have flagged the domain as malicious, indicating a moderate level of detection consensus.

No additional contextual data such as registrar information, hosting IP, ASN, SSL certificate details, or page title has been published in the available intelligence, so the broader infrastructure cannot be fully mapped at this time. The limited blocklist presence suggests that the domain may be newly registered or used intermittently, yet the multi‑vendor detections on VirusTotal demonstrate that at least some scanning engines have identified phishing‑related artifacts associated with the host. Defenders should add hcwjcope.poundbahis.com to outbound and inbound deny lists, monitor DNS queries for this sub‑domain, and consider correlating any internal logs that reference the poundbahis.com parent zone.

Continuous re‑evaluation is advised, as further analysis may uncover additional indicators such as hosting provider, SSL fingerprints, or content signatures that can improve detection rules. Until more evidence is released, the domain should be treated as high‑risk for credential‑stealing activity.