thegraph[.]blog

The domain thegraph.blog was registered on September 25, 2025 through HOSTINGER operations, UAB and is currently hosted on Hostinger International Limited infrastructure (ASN 47583) located in Lithuania. DNS resolution points to the IPv4 address 84.32.84.32, which is associated with Hostinger’s parking service and returns the page title “Parked Domain name on Hostinger DNS system”. The domain uses the default parking nameservers ns1.dns-parking.com and ns2.dns-parking.com and does not present an SSL certificate, indicating an unsecured HTTP endpoint.

Threat intelligence records classify the site as a generic phishing page; the site has been taken offline but remains listed on one security blocklist and is actively blocked by the PhishDestroy feed. VirusTotal analysis shows three of ninety‑five scanners flag the domain, reinforcing the suspicion of malicious use. No additional content, login forms, or brand‑specific impersonation details have been observed, so the exact phishing payload or targeted brand cannot be confirmed.

Defenders should continue to monitor the domain’s DNS and IP activity, enforce blocklist rules that include the observed IP and nameservers, and consider adding the domain to internal URL filtering policies. Given the lack of SSL and the parking page, any future re‑activation is likely to serve a phishing landing page; therefore, proactive blocking and periodic re‑scanning are recommended to mitigate potential abuse.