tripscan-com[.]info

Analysis of tripscan-com.info shows a newly registered domain created on July 16, 2026 and currently resolving to the IP address 188.114.96.3. The domain is delegated to the Cloudflare authoritative nameservers june.ns.cloudflare.com and vicky.ns.cloudflare.com, indicating the use of a reputable DNS provider for hosting. Registration was performed through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known to serve a broad client base. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that at least one anti‑phishing service has flagged it as malicious. VirusTotal reports indicate that the domain was scanned by 95 AV vendors, none of which generated a detection; this zero‑detection count is recorded but does not establish safety, as many phishing sites evade signature‑based scanners. No additional intelligence such as SSL certificate details, HTTP response codes, Safe Browsing status, or content analysis is presently available, leaving the exact nature of the hosted payload unconfirmed beyond the generic phishing classification. The domain remains active as of the report date, July 20, 2026, and is listed as under investigation. Defensive teams should consider adding tripscan-com.info to network‑level blocklists, enforce DNS filtering policies that deny resolution, and monitor outbound traffic for connections to the associated IP address. Continuous re‑evaluation is advised to capture any future changes in hosting, payload delivery, or detection status.