195000222[.]com

195000222.com, a domain associated with phishing activities, has been flagged by 21 out of 93 vendors on VirusTotal. Despite its current offline status, the domain's history and detection by PhishDestroy on December 31, 2025, highlight its previous malicious activities. Registered through GoDaddy.com, LLC, the domain was hosted on an IP address located in Hong Kong, under the organization AS135581 ONL-HK.

The domain utilized an SSL certificate issued by Default Company Ltd, which is often indicative of a lack of proper security measures. This, combined with its presence on a public blocklist maintained by PhishDestroy, underscores the domain's role in phishing schemes. The prompt action to take it offline suggests a quick response to its malicious nature.

Phishing domains like 195000222.com exploit vulnerabilities in the time between domain registration and antivirus database updates, typically a window of 24-72 hours. PhishDestroy's early detection capabilities allow it to identify such threats before they propagate widely. The fact that this domain has been taken down does not diminish the importance of understanding its operation and the need for continued vigilance in monitoring similar threats.