p2p-free[.]bond

Analysis of the domain p2p-free.bond indicates a high‑risk phishing operation that was registered on July 20, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain is served by four authoritative name servers—dns1.worldbyte.net, dns2.worldbyte.net, dns3.worldbyte.net, and dns4.worldbyte.net—and resolves to the single IPv4 address 88.99.62.41. Threat intelligence sources have placed the domain on at least one public blocklist, and PhishDestroy has explicitly listed it as blocked, confirming that security communities have observed malicious activity associated with this host.

VirusTotal reports that one out of ninety‑one scanned security vendors flagged the domain, providing additional, albeit limited, vendor corroboration of its malicious nature. The domain remains active as of the report date, July 26, 2026, and no further public indicators such as SSL certificates, HTTP response codes, page titles, or additional blocklist entries have been disclosed. Given the sparse but consistent evidence—recent registration, dedicated name servers, a single IP address, blocklist inclusion, and a vendor detection—the confidence level for a phishing threat is elevated.

Defenders should immediately block DNS resolution to p2p-free.bond and network traffic to 88.99.62.41, monitor for any anomalous connections from internal hosts to that address, and incorporate the domain into existing phishing detection rules. Continuous re‑evaluation is advised, as additional telemetry such as page content or SSL metadata may emerge and refine the threat profile.