liberty-volt[.]com

liberty-volt.com was registered on 11 December 2023 through Realtime Register B.V. and resolves to the Hostinger International Limited address 194.36.184.135 in the United Kingdom (AS47583). The domain uses default parking nameservers ns1.dns‑parking.com and ns2.dns‑parking.com and does not present an SSL certificate, meaning it only serves HTTP content. The page title returned from the host is “Liberty‑Volt”, which bears no obvious relation to the targeted brand. Threat intelligence flags the site as a brand‑impersonation campaign aimed at Amazon; the classification is corroborated by its inclusion on a single security blocklist and by a Gridinsoft trust score of 0 / 100.

VirusTotal scans show that 7 of 95 antivirus engines flagged the domain, indicating a non‑trivial level of malicious activity. PhishDestroy has already taken the domain offline, and it appears on the current blocklist. The lack of HTTPS, the use of generic parking nameservers, and the low trust score collectively suggest a low‑cost infrastructure typical of opportunistic brand‑spoofing operations.

Uncertainty remains regarding the exact payload or credential‑harvesting mechanisms, as no page content has been captured and no additional indicators such as phishing URLs or malicious files have been disclosed. Defenders should block the domain at network perimeter and email filtering layers, add the IP address 194.36.184.135 to deny lists, and monitor for re‑registration or similar domains using the same registrar or hosting provider. Ongoing vigilance is recommended, including periodic re‑scans of the domain in VirusTotal and verification against emerging blocklists, to ensure rapid detection if the site resurfaces.