andesitgroup[.]com

This domain, andesitgroup.com, is under investigation for hosting generic phishing infrastructure. Registered on May 30, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, the domain remains active as of July 20, 2026. Analysis reveals it resolves to the IP address 84.247.144.165, with nameservers ns1.webmutiarabiru.com and ns2.webmutiarabiru.com. The domain appears on one security blocklist, specifically PhishDestroy, indicating prior detection as malicious. VirusTotal data shows a single security vendor flagging the domain, though the exact nature of the detection remains unverified due to limited vendor reporting. Infrastructure analysis indicates the domain is not widely recognized by major threat intelligence platforms, as evidenced by its minimal detection footprint. The hosting provider and registrar are consistent with those commonly used in phishing operations, though no definitive ties to a specific threat actor or campaign are established. The absence of additional context—such as SSL certificate details, HTTP response codes, or page content—limits further classification of the phishing activity. Defenders should treat this domain as high-risk and monitor for connections or attempts to access it within their networks. Blocking or sinkholing the domain at the DNS or proxy level is recommended until further analysis confirms its legitimacy or threat profile. No brand-specific targeting or scam type has been identified in the available data.