design[.]gives

design.gives is a newly registered domain (created 21 Feb 2026) that has been classified as a generic phishing site. The domain resolves to 63.247.93.90, an address owned by AS11042 NETWORK TRANSIT HOLDINGS LLC in the United States. Infrastructure analysis shows the web server runs Apache HTTP Server with OpenSSL, and the site presents a Let’s Encrypt R12 TLS certificate. The page title returned by HTTP 200 is simply “design.gives/”, and no further content has been publicly disclosed. Reputation data are poor: Gridinsoft assigns a trust score of 0 / 100, the domain appears on one security blocklist, and PhishDestroy has already blocked it.

VirusTotal reports that 9 of 95 scanning engines flag the domain, indicating malicious activity, and AlienVault OTX lists the host in a single threat‑intel pulse. The registrar is Sav.com, LLC and the authoritative nameservers are ns1.linkshare.org and ns2.linkshare.org. The domain is currently active and continues to return HTTP 200. Based on the observable evidence, the primary risk is credential harvesting or other phishing‑related abuse. The lack of additional context such as the target brand or landing‑page structure leaves the exact payload unknown, but the convergence of multiple detections, a zero‑trust score, and active blocking by PhishDestroy justifies a high‑risk classification.

Defenders should add 63.247.93.90 to network‑level deny lists, enforce DNS blocking of design.gives, and monitor for any outbound connections to the IP. Continuous re‑scanning with multi‑engine services is advised to capture any evolution of the payload. Organizations that rely on email or web filtering should ensure that their solutions reference the latest blocklists that already contain this domain. Incident response teams should treat any user‑reported interactions with design.gives as compromised and initiate credential reset procedures.