add2[.]shop

The domain add2.shop is associated with generic phishing and holds an active status. Risk assessment places it at an elevated level with no brand impersonation noted in the provided intelligence.

The SSL certificate utilized originates from Google Trust Services. VirusTotal data indicates flagging by 3 of 95 security vendors. Resolution occurs to IP 34.36.201.214 and the page title recorded is qifei111. These elements form the basis for technical indicators observed in connection with this domain. Threat analysis indicates potential for data theft given the phishing classification. Technical indicators such as the specific IP allocation and certificate authority choice may be used for attribution in larger campaigns. Risk assessment concludes that despite the limited vendor detections the active nature elevates the concern for targeted attacks.

Current status confirms ongoing activity requiring immediate attention from security teams. Recommendations include implementing blocks for both the domain add2.shop and the associated IP 34.36.201.214. Organizations should conduct awareness training focused on recognizing phishing attempts originating from such sources. Continuous scanning of network traffic for references to this domain is essential. The unique seed a15d42 provides a method for correlating future detections. Overall this configuration presents a clear vector for credential harvesting or malware distribution typical of generic phishing operations. Actionable safety guidance advises immediate isolation of any systems that have interacted with the domain and review of logs for connections to 34.36.201.214.