i4zhusao[.]icu

This domain, i4zhusao.icu, has been identified as a phishing vector and is presently taken offline. Registration data shows the domain was created on 21 February 2026 and is held by Gname.com Pte. Ltd., a registrar known to host a variety of short‑lived sites. The authoritative nameservers are expire1.gname-dns.com and expire2.gname-dns.com, which are typical of domains that use the Gname expiration service. DNS resolution points to the IP address 172.245.67.31, located in the United States and announced by AS36352 (HostPapa). HostPapa is a commercial web‑hosting provider that frequently appears in abuse reports, but no additional infrastructure beyond the single IP has been observed.

The site lacks an SSL/TLS certificate, indicating that any traffic would have been transmitted over cleartext HTTP. The page title returned by the server is simply “i4zhusao.icu”, offering no clues about the intended victim brand or lure. VirusTotal analysis shows that nine out of ninety‑three scanning engines flagged the domain, reinforcing the suspicion of malicious activity. The domain also appears on one external blocklist and has been listed by PhishDestroy, confirming that threat‑intel feeds have already marked it as hostile. AlienVault OTX reports a single pulse referencing the domain, providing a modest but corroborating source of evidence.

Because the domain is already offline, immediate mitigation such as sink‑hole redirection is not required, but defenders should still update perimeter and DNS filtering solutions to block any resolution attempts. Organizations that employ outbound web filtering should ensure that both the domain name and its associated IP address (172.245.67.31) are denied. Continuous monitoring of the registrar Gname.com and the hosting ASN (AS36352) is advisable, as adversaries often spin up new phishing domains using the same infrastructure.