islafrostx[.]com

Analysis indicates that the domain islafrostx.com was registered on 24 March 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the Cloudflare‑owned address 104.21.4.242, which is geolocated in Canada. The site presented the page title “Isla Frost | Exclusive”, suggesting an attempt to lure victims via a social‑media‑related narrative. The TLS certificate is issued by Let’s Encrypt (E8), providing encryption but not validating the underlying content.

Multiple defensive feeds have taken action: the domain is listed on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans show that 16 of 94 antivirus and URL‑reputation engines flagged the domain, reinforcing the malicious assessment. The current HTTP response indicates the site is offline, which may reflect takedown or temporary suspension.

The available intelligence confirms a social media phishing classification, yet no detailed payload or credential‑harvesting page has been captured, leaving the exact phishing vector uncertain. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑hosting of the same content on other Cloudflare IPs, and add the IP address 104.21.4.242 to threat‑intel feeds. Ongoing observation of the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED for additional domains is recommended, as well as periodic re‑scanning to detect any re‑activation.