195120[.]com

The domain 195120.com presents as a site titled "智能线路选择" (Smart Route Selection), a common naming convention for platforms offering proxy or VPN services, which are frequently used to anonymize malicious traffic. The site poses a threat as a potential proxy or anonymization service, enabling threat actors to mask their origin and evade detection during attacks. No specific brand impersonation is indicated in the provided data.

Technical analysis reveals significant security concerns. VirusTotal reports 16 detections out of 95 scanning engines, with flags from alphaMountain.ai, BitDefender, CyRadar, ESET, and Forcepoint ThreatSeeker. The site is listed on 1 blocklist. It was registered on 2021-06-01 via GoDaddy.com, LLC, and resolves to IP address 151.243.130.149, located in the United States, hosted on AS209242 (Cloudflare London, LLC). The SSL certificate is issued to Default Company Ltd, a generic entity. Nameservers are alexis.ns.cloudflare.com and blair.ns.cloudflare.com.

The site is currently offline (DOWN/OFFLINE). GridinSoft trust rating is 0 out of 100, indicating high risk. Despite being inaccessible, the domain’s history of 16 VirusTotal detections and its registration details suggest it was previously used for malicious purposes. The risk level is assessed as high due to the confirmed detections and association with proxy services, which are commonly exploited for cybercrime.