4912377[.]com

Analysis of 4912377.com indicates active malicious infrastructure supporting a generic phishing campaign. The domain was registered through Spaceship, Inc. on March 18, 2026 and currently resolves to the IP address 162.210.101.174. VirusTotal reports that 2 of 91 security vendors have flagged the domain, demonstrating that at least a subset of scanning engines have identified it as suspicious.

The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, confirming that defensive communities consider it a confirmed threat. Nameserver resolution is handled by dns1.freehostia.com and dns2.freehostia.com, both of which are typical of low-cost hosting providers often leveraged for rapid deployment of phishing sites. No public evidence of SSL certificates, HTTP response codes, page titles, or detailed content analysis is presently available, leaving the exact phishing payload and targeted brand undefined.

Given the confirmed activity, defenders should proactively block 4912377.com and its associated IP 162.210.101.174 at network perimeters, update URL filtering and DNS sinkhole configurations, and monitor for any related domains sharing the same registrar or hosting infrastructure. Continuous re‑evaluation is advised as additional threat intelligence, such as content snapshots or extended vendor detections, may emerge.