orgasmpleasures[.]com[.]redbagproductions[.]com

Analysis of the domain orgasmpleasures.com.redbagproductions.com indicates that it is being used as a high‑risk generic phishing site. The site resolves to the IPv4 address 192.142.10.5, which is geolocated to the Netherlands and is advertised as part of AS214036 (Ultahost, Inc.). Registration records show the domain was created on March 11, 2026 and was provisioned through Ultahost, Inc., using the authoritative name servers ns1.ultahost.com through ns4.ultahost.com. The web server presents a Let's Encrypt R13 certificate and responds with HTTP status 200 over LiteSpeed and HTTP/3, with PHP detected in the stack. The page title returned is "How to Give a Woman an Orgasm - The Complete Guide for Men | Orgasm Pleasures," which does not correspond to any known legitimate brand and suggests content designed to lure victims. Security telemetry shows the domain appears on one blocklist, has a Gridinsoft trust score of 0 / 100, and five of ninety‑four VirusTotal scanners have flagged it. PhishDestroy currently blocks the domain, confirming its malicious classification. While the exact phishing payload or credential‑harvesting mechanism has not been publicly disclosed, the combination of a recent registration, low trust score, and multiple security detections provides strong evidence of malicious intent. Defenders should add the domain and its underlying IP to deny‑list rules, monitor DNS queries for the associated nameservers, and consider broader blocking of Ultahost‑hosted infrastructure pending further investigation.