client-9ts3p5c7z8ts[.]com

This domain client-9ts3p5c7z8ts.com has been classified under generic phishing with a high risk level and maintains an active status. Registered on February 17 2026 via Fewmoretaps OU d/b/a Trustname.com the hostname resolves to IP 172.67.194.253 hosted in Canada through Cloudflare infrastructure. The site returns HTTP status 200 and presents a page titled Verification d'identite which directly matches the observed threat classification.

Infrastructure analysis reveals use of an SSL certificate from Google Trust Services under the WE1 profile. The domain appears in one AlienVault OTX pulse and registers on a single security blocklist. VirusTotal records flags from 2 out of 95 vendors while the Gridinsoft trust score is recorded at 0 out of 100. These metrics establish concrete malicious indicators without reliance on broader behavioral assumptions.

Defenders should block the IP 172.67.194.253 at network perimeters and inspect DNS logs for resolution attempts to client-9ts3p5c7z8ts.com. Correlation of this hostname against internal proxy or mail traffic is recommended given the identity verification theme in the page title. Registration details through the noted registrar can support further queries to hosting providers for continuity of the observed activity.

Uncertainty remains around the precise campaign targets or payload delivery mechanisms beyond the generic phishing label. The combination of recent registration low trust metrics and confirmed blocklist presence supplies sufficient evidence for prioritized containment actions while additional samples or user reports would refine attribution.