2222[.]ooo

This domain, 2222.ooo, was registered through DYNADOT LLC on August 07, 2024 and is currently resolved to the IP address 13.75.95.171. The authoritative name servers listed for the zone are n1.xundns.com and n2.xundns.com. Threat‑intelligence feeds have flagged the domain as active phishing infrastructure; the PhishDestroy blocklist currently lists it, and it appears on one additional security blocklist.

VirusTotal analysis shows that seven of ninety‑one scanning engines have returned a malicious verdict, indicating a consensus of suspicious behavior among multiple vendors. No public SSL/TLS certificate details, HTTP response codes, or page title information are available in the collected data, so the content served by the site has not been examined. Likewise, there is no indication of a targeted brand or specific phishing kit in the evidence set.

The limited detection footprint—one blocklist entry and a modest VirusTotal detection count—suggests that the infrastructure is either newly deployed or operating with a low profile, but the presence of multiple vendor detections confirms that the domain is being used for malicious purposes. Defenders should add 2222.ooo to outbound and inbound filtering rules, monitor DNS queries for the associated name servers, and consider enriching local threat feeds with the IP 13.75.95.171. Continuous re‑evaluation is recommended, as further analysis of the web content or TLS fingerprint could reveal additional indicators of compromise.