itscoming[.]site

The domain itscoming.site was registered on April 09, 2026 through Namecheap Inc and is served by the authoritative nameservers dns1.registrar-servers.com and dns2.registrar-servers.com. DNS resolution maps the domain to the IPv4 address 159.69.57.6, indicating a single‑host hosting model. Threat intelligence lists the domain on one public blocklist and records it as blocked by the PhishDestroy feed, confirming that external monitoring services have identified it as malicious.

VirusTotal reports that the domain has been examined by 91 scanning engines, none of which have generated a detection at the time of analysis; this absence of detections does not constitute evidence of benign behavior. The domain remains active, with no public indication that the hosting or registration details have been altered since creation. Observable data therefore points to a newly minted infrastructure that is already being leveraged for generic phishing, as indicated by the threat type label.

Uncertainties remain regarding the specific payload, credential‑capture mechanisms, or any associated command‑and‑control infrastructure, because no page content, SSL certificate details, or HTTP response codes have been disclosed. Defenders should add itscoming.site to local deny lists, enforce DNS‑level blocking, and monitor outbound connections to 159.69.57.6 for any anomalous traffic. Continuous re‑scanning with multi‑vendor services is advised to capture any future detections that may arise as the site evolves.