immortalpos[.]co[.]za

The domain immortalpos.co.za is currently active and classified as a high‑risk generic phishing site. Registration occurred on 14 January 2024 through the DIAMATRIX C.C. registrar and the domain resolves to the IPv4 address 169.239.218.51, which is allocated to AS327979 in South Africa. Four authoritative name servers (ns1.tld‑ns.net, ns2.tld‑ns.com, ns3.tld‑ns.net, ns4.tld‑ns.com) serve the zone, and the sole MX record points to mx1.tld‑mx.com with priority 10. An HTTP GET returns status 200 and the page title "immortalpos is under construction". The site runs WordPress on a LiteSpeed web server, with MySQL, PHP, jQuery, OWL Carousel, and supports HTTP/3. SSL is provided by a publicly trusted certificate authority and is presently valid. Reputation scoring is extremely low (Gridinsoft 0/100). Five of ninety‑five VirusTotal scanners have flagged the domain, and AlienVault OTX lists sixteen threat‑intel pulses referencing it. The domain appears on three public blocklists, including PhishDestroy, Enkrypt, and PhishingDB. No additional content analysis is available beyond the title, so the exact phishing lure cannot be confirmed. Defenders should add the domain and its IP address to deny‑list controls, monitor DNS queries for the four name servers, and consider sinkholing the host. Continuous re‑evaluation is advised as threat‑intel updates may reveal new indicators.