followmysample[.]com

Analysis of followmysample.com indicates that the domain is being leveraged in a generic phishing operation. The domain was registered through GoDaddy.com, LLC on 11 April 2013 and currently resolves to the IP address 162.144.7.158, which belongs to the Unified Layer network (AS46606) located in the United States. Hosting is provided by HostGator, as evidenced by the authoritative nameservers ns6461.hostgator.com and ns6462.hostgator.com, and the web server identifies itself as Apache HTTP Server. The site presents a 503 HTTP response and the SSL certificate is issued by Let’s Encrypt (R12), indicating the presence of HTTPS despite the error page. Reputation services flag the domain as highly suspicious.

Scamadviser assigns a trust score of 1 out of 100, and Google Safe Browsing classifies the URL as a social‑engineering threat. AlienVault OTX has included the domain in 17 separate threat‑intelligence pulses. VirusTotal reports that 14 of 95 scanned security vendors have flagged the domain, confirming its malicious nature. The domain appears on at least one public blocklist and is actively blocked by the PhishDestroy service. The current operational status is offline, with the HTTP status returning 503, which may be a takedown or a temporary interruption.

No further technical artifacts such as phishing page content or credential‑harvesting parameters have been disclosed. Consequently, the precise phishing campaign vector and targeted brand remain unconfirmed. Defenders should add 162.144.7.158 and the associated hostnames to network‑level deny lists, enforce DNS‑based blocking of followmysample.com, and monitor for any resurgence of activity from the Unified Layer ASN. Continuous re‑scanning of the domain on multi‑vendor platforms is advised to capture any changes in detection patterns. Incident response teams should treat any inbound traffic from this domain as malicious and quarantine related emails until further analysis is completed.