poisonivycream[.]com

Analysis of poisonivycream.com indicates that the domain is currently active and serving HTTP content with a response code of 200. The domain is registered through GoDaddy.com, LLC and utilizes the nameservers 5680.ns1.abovedomains.com and 5680.ns2.abovedomains.com. VirusTotal records show that one of ninety‑one security vendors has flagged the domain, suggesting at least a single detection of malicious activity.

The domain also appears on a publicly available security blocklist, and it has been explicitly blocked by the PhishDestroy service, reinforcing the classification as a phishing threat. No additional infrastructure details such as hosting IP address, autonomous system number, or SSL certificate information are present in the available intelligence, leaving those aspects unverified at this time. The limited detection footprint—only a single vendor flag and a single blocklist entry—does not preclude the domain from being used in targeted campaigns, especially given its active HTTP response and registrar information.

Defensive operators should consider adding poisonivycream.com to network‑level deny lists, monitoring DNS queries for the associated nameservers, and employing URL filtering solutions that reference the blocklist entry. Continuous re‑evaluation is recommended, as future observations may reveal further malicious indicators or increased detection counts.