interspacebroker[.]com

The domain interspacebroker.com was first observed on April 30, 2025, when its WHOIS record was created. Registration was performed through TuringSign Inc. d/b/a Cosmotown, and the authoritative name servers are listed as abby.ns.cloudflare.com and thomas.ns.cloudflare.com, indicating use of Cloudflare’s DNS service. Network resolution points to the IPv4 address 204.13.237.19. No additional IP aliases have been reported, and the hosting provider is not disclosed, but the address resides in a range commonly associated with shared hosting environments.

Reputation checks show that the domain is currently listed on a single security blocklist and has been flagged by the PhishDestroy blocklist, confirming its association with malicious activity. VirusTotal has processed the domain with scans from 91 independent vendors; none of the vendors raised a detection at the time of analysis. The absence of detections does not constitute a safety guarantee, and the domain remains classified as a generic phishing threat under investigation. Publicly available intelligence does not include a Safe Browsing verdict, Open Threat Exchange entries, SSL certificate details, HTTP response codes, page title, or evidence links, leaving the exact content and target of the phishing lure unknown.

Defenders should block DNS resolution for interspacebroker.com at the network perimeter, monitor outbound connections to the IP 204.13.237.19, and include the domain in endpoint allow‑list exclusions for phishing detection. Organizations using email or web gateway filters should ensure their URL filtering services reference the latest blocklist entries and that heuristic rules for Cloudflare‑hosted domains are reviewed to avoid false positives. Given the lack of a published page title or brand targeting information, threat‑hunting efforts should focus on traffic patterns indicative of credential‑stealing attempts, such as POST requests to login endpoints following redirection from the domain.