iscans[.]life

iscans.life is currently active and has been classified as a generic phishing site. The domain was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and uses the authoritative name servers dns1.regway.com through dns4.regway.com. DNS resolution points to the IPv4 address 170.75.164.161, which belongs to AS174 Cogent Communications, LLC and is geolocated in Canada. An HTTPS connection presents a certificate for “Hestia Control Panel / panel.yourdomain.com”, indicating the server is likely hosting a control‑panel interface rather than a legitimate brand site. The web server returns an HTTP 301 redirect and the page title observed is “Success!”. Security‑reputation services assign a Gridinsoft trust score of 0 out of 100, and the domain appears on four independent blocklists, including PhishDestroy, MetaMask, SEAL and ScamSniffer. VirusTotal analysis shows that two of ninety‑three scanned scanners flagged the domain, confirming at least some detection of malicious activity. The evidence demonstrates an infrastructure typical of phishing operations, but the specific payload, target brand, and compromised credentials have not been disclosed publicly. Defenders should block the domain and its associated IP at perimeter defenses, monitor DNS queries for the listed name servers, and consider adding the IP to threat‑intel feeds. Ongoing observation is recommended to capture any future changes in hosting or content.