app-hpointservice[.]soulexport[.]com

This domain, app-hpointservice.soulexport.com, was observed serving a generic phishing site whose HTTP response returned the title “Index of /”. The domain resolves to 142.4.198.208, an address owned by AS16276 OVH SAS in Canada. Registration records show the domain was created on July 18, 2020 and is listed under the registrar 1API GmbH. The authoritative name servers are ns1.whc.ca, ns2.whc.ca, and ns3.whc.ca.

No TLS certificate was presented, indicating the site operated only over plain HTTP. Reputation scoring is extremely low: Gridinsoft assigns a trust score of 0 out of 100, and Scamadviser reports 1 out of 100. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service. VirusTotal analysis returned 12 positive detections out of 95 scanned engines, confirming malicious classification by multiple anti‑malware vendors.

The site is currently taken offline, but the infrastructure elements—OVH hosting, the WHC name servers, and the lack of encryption—remain observable for future reference. Defenders should continue to block the IP address 142.4.198.208, add the domain to local deny lists, and monitor for any re‑registration attempts. Because the page content beyond the title was not captured, the exact phishing payload or target brand cannot be confirmed; analysts should treat the domain as a high‑confidence phishing indicator pending further forensic capture.