sephoras[.]org

The domain sephoras.org was registered on June 18, 2026 through Global Domain Group LLC and remains active as of the report date, July 22, 2026. DNS resolution points to the IPv4 address 103.101.85.123, served by Cloudflare name servers carter.ns.cloudflare.com and rayne.ns.cloudflare.com. VirusTotal analysis shows that three of ninety‑five scanning engines have flagged the domain, indicating a modest but non‑trivial detection signal.

The domain is listed on a single external blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the perception of malicious intent. The threat classification supplied is generic phishing, and the risk level has been assigned as high. No additional public intelligence such as Safe Browsing verdicts, OTX references, SSL certificate details, HTTP status codes, or trust‑score metrics are available in the current dataset, leaving those vectors unverified.

Consequently, the confidence in the phishing attribution rests primarily on the registrar information, IP hosting, detection count, and blocklist presence. Defenders should consider adding sephoras.org to local deny lists, monitoring outbound connections to 103.101.85.123, and enforcing URL filtering policies that block the domain at the perimeter. Continuous re‑evaluation is advised, as further analysis of page content, certificate fingerprints, or traffic patterns may reveal additional indicators of compromise.