hydroflask-serseats[.]com

hydroflask-serseats.com was registered on February 11, 2026 through NameSilo, LLC. The domain resolves to the IPv4 address 173.249.198.196, which is announced by AS11878 (tzulo, inc.) and geolocated to the United States. Public scanning on VirusTotal shows that 9 out of 93 security vendors have flagged the domain as malicious, indicating a consensus of at least moderate detection across multiple engines. The Gridinsoft trust score for the host is 0 out of 100, the lowest possible rating, and the site is listed on a single external security blocklist. PhishDestroy has actively blocked the domain, and the current operational status is reported as offline.

The only observed HTTP response header is a page title of “Just a moment…”, which does not reveal the intended victim or lure. An SSL certificate is present and is identified as type E8, but no further validation details are provided. The combination of low trust score, multiple vendor detections, and blocklist presence suggests the domain is being used for a generic phishing campaign, although the exact phishing vector, targeted brand, or credential‑harvest page has not been disclosed in the available data. Because the domain is already taken offline, immediate containment actions are limited to confirming that the IP address 173.249.198.196 is no longer serving malicious content and ensuring that any previously cached DNS records are purged from internal resolvers.

Organizations should continue to block the domain at perimeter firewalls, proxy solutions, and endpoint web filters, and they should monitor for any residual traffic directed to the associated IP or ASN. Additional investigation into log sources may reveal whether any user agents attempted to access the site before it was taken down. Threat intelligence consumers should update their detection rules with the observed indicator set: domain name, registrar, creation date, IP address, ASN, SSL certificate label, and the 9/93 VirusTotal detection count.