espacioinvisible[.]com

This domain, espacioinvisible.com, is flagged as an active generic phishing site with high risk as of July 19, 2026. Infrastructure analysis reveals it resolves to IP 217.76.150.59, hosted by arsys.es in Spain, and is registered through Arsys Internet, S.L. (NICLINE.COM). The domain currently returns an HTTP 403 status, indicating access is forbidden, though the default page title ('Default website / Sitio web por defecto') suggests a placeholder or staging environment for phishing content. Nameservers are ns3.piensasolutions.com and ns4.piensasolutions.com, while MX records point to smtp.google.com with priority 1, a configuration often abused to lend legitimacy to phishing emails or to intercept communications. Five of 91 security vendors on VirusTotal have flagged this domain, though the specific detection context remains unverified. The SSL certificate is issued by Sectigo Limited (Sectigo Public Server Authentication CA OV R36), which does not inherently indicate malicious intent but is commonly used by both legitimate and malicious sites. The domain appears on at least one security blocklist, corroborating its classification as a threat. No specific brand impersonation or phishing kit is identified in the available data, and the exact content or target of the phishing campaign is not yet analysed. Defenders should treat this domain as active and high-risk. Immediate actions include blocking the domain and its resolving IP (217.76.150.59) at the perimeter, monitoring for internal traffic to or from the domain, and reviewing email logs for references to smtp.google.com in connection with this domain. If the domain is encountered in phishing emails, analyse headers for additional indicators. Given the Spanish-language page title and hosting in Spain, prioritise monitoring for Spanish-language phishing campaigns or regional targets. Further investigation is required to determine the exact phishing methodology or brand impersonation, if any.