your-exmaple-domain[.]click

your-exmaple-domain.click was registered on March 29, 2026 through Global Domain Group LLC. The domain is protected by a Let’s Encrypt certificate issued in the current year, indicating recent TLS deployment. No prior registration history is visible, and the domain's age is less than four months, which aligns with typical timelines for newly launched phishing infrastructure.

The domain resolves to the IPv4 address 95.111.242.186, hosted by Contabo GmbH in France. This hosting provider is frequently observed in malicious campaigns due to its permissive terms of service. The IP appears on a single security blocklist and has been referenced in one AlienVault OTX pulse, suggesting limited but concrete exposure in threat‑sharing feeds.

Web requests to the domain return HTTP 502 responses, indicating a misconfigured or intentionally broken backend, a pattern often used to obscure the true payload while maintaining a reachable surface. The threat is classified as a generic phishing campaign and is currently listed as active with a risk level of under investigation. VirusTotal has recorded zero detections across 95 scans, which neither confirms safety nor confirms maliciousness; the absence of detections reflects limited exposure rather than a clean verdict.

Defenders should add 95.111.242.186 and the domain name to block lists and monitor DNS queries for any sudden spikes. Continuous observation of the IP's reputation across additional intel sources is advised, as the low detection count may evolve rapidly. Sharing the observed indicators with upstream feed providers will improve collective visibility, and any future changes in HTTP status or detection counts should be re‑evaluated promptly.