johnakinrandolph[.]com

This domain, johnakinrandolph.com, is actively flagged as a high-risk social engineering phishing site. Infrastructure analysis reveals it resolves to IP address 192.185.163.185, a host associated with known malicious activity. The domain was registered on October 23, 2007, through ENOM, INC., and uses nameservers ns27.websitewelcome.com and ns28.websitewelcome.com, a configuration commonly observed in compromised or fraudulent hosting environments. Google Safe Browsing explicitly categorizes this domain as engaging in social engineering, a classification supported by its presence on at least one security blocklist and detection by PhishDestroy.

Of the security vendors that have scanned the domain on VirusTotal, 16 out of 91 flag it as malicious, indicating broad but not unanimous consensus on its threat status. No specific brand impersonation or phishing kit has been confirmed in the available data, and the exact content of the site remains unanalyzed. However, the combination of social engineering flags, blocklist inclusion, and vendor detections provides strong evidence of active malicious intent.

Defenders are advised to treat this domain as hostile and implement blocking at the network level. Given its long registration history, the domain may have been repurposed for phishing, a tactic frequently observed in compromised legitimate sites. Further investigation into the hosting provider and associated IP reputation is recommended to assess potential collateral damage or additional threats within the same infrastructure.