72-14-190-53[.]ip[.]linodeusercontent[.]com

The domain 72-14-190-53.ip.linodeusercontent.com is associated with a generic phishing operation and has a critical threat score of 95/100. Currently, the site is down, indicating it has likely been taken down due to its malicious activity. VirusTotal reports that 10 out of 95 security vendors, including ESET and Kaspersky, have flagged this domain as malicious, and it is listed on two public blocklists, although Google Safe Browsing has not flagged it.

Registered with MarkMonitor, Inc. on December 18, 2019, the domain's first-seen date is November 29, 2025, suggesting it may have been dormant or newly active. The hosting IP is 72.14.190.53. Given the high threat score and detection count, block this domain at the perimeter and submit it to the registrar's abuse desk.