robinsonterminal[.]us

The domain robinsonterminal.us is currently active and resolves to the IPv4 address 66.96.162.128, which is hosted in the United States under ASN 29873 (Newfold Digital, Inc.). Registration details show the domain was created on April 2, 2019 through Domain.com and uses the nameservers ns1.domain.com and ns2.domain.com. The web server presents a valid Sectigo Limited SSL certificate issued by the Sectigo Public Server Authentication CA DV R36 and returns an HTTP 200 response with the page title "Access Denied". Automated analysis identifies PHP as the underlying technology. Threat intelligence indicates a Gridinsoft trust score of 0 / 100, inclusion in one AlienVault OTX pulse, and detection by five of ninety‑one VirusTotal scanners. The domain appears on a single security blocklist and has been flagged by PhishDestroy as a high‑risk generic phishing source. While the exact content of the site has not been publicly disclosed, the combination of a low trust score, multiple vendor detections, and blocklist presence suggests malicious intent consistent with phishing. Defenders should block the domain and its associated IP at network perimeters, monitor for any related C2 activity, and consider adding the domain to internal threat feeds. Continued observation is advised to detect any changes in hosting or content that could affect risk assessments.