assig[.]youngwebpage[.]org

The domain assig.youngwebpage.org was observed on July 12, 2026 and classified as a generic_phishing threat with a high risk rating. The site currently returns HTTP 200 and presents the page title “Young Real estate market.” The domain was created on June 26, 2025 and remains active, indicating a relatively recent infrastructure that is still in operation.

Infrastructure analysis shows the domain resolves to IP address 198.251.89.220, which is assigned to ASN 53667 (FranTech Solutions) and geolocated in the United States. Registration was performed through Global Domain Group LLC. The hosting environment is identified as a LiteSpeed web server running WordPress, MySQL, PHP, Bootstrap, Swiper, OWL Carousel, and jQuery Migrate. The site is protected by a Let’s Encrypt YR1 certificate and uses three authoritative nameservers: ns27.asurahosting.com, ns28.asurahosting.com, and ns27.my-control-panel.com.

Reputation signals reinforce the malicious assessment. Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on one security blocklist. VirusTotal scans show that 12 out of 95 security vendors flagged the domain, providing independent confirmation of suspicious activity. The domain has also been blocked by the PhishDestroy mitigation service, further evidencing its use in phishing campaigns.

Defenders should prioritize immediate containment. The domain should be added to network and email deny lists, and any outbound connections to 198.251.89.220 should be blocked at the firewall level. Continuous monitoring for additional indicators, such as related subdomains or similar registration patterns, is advised. Where possible, sinkholing the IP or redirecting traffic to a safe landing page can aid in disrupting the campaign while preserving forensic evidence for further investigation.