dispers[.]app

The domain dispers.app is currently offline, but historical indicators show it was used for generic phishing. Gridinsoft assigned it a trust score of 0 out of 100, indicating a complete lack of reputation. The domain was registered through Hostinger operations, UAB and is served by the parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. DNS resolution points to the IPv4 address 212.85.28.189, which belongs to AS47583 Hostinger International Limited and is geolocated in the United States.

No TLS certificate was observed for the host, meaning any attempted HTTPS connection would fail or be downgraded to HTTP. VirusTotal analysis recorded four detections out of ninety‑five scanned security vendors, confirming that at least a minority of scanners consider the domain malicious. Five independent blocklists have listed dispers.app, and it is actively blocked by the PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura filtering services. The lack of an SSL certificate, combined with the low trust score, the presence on multiple blocklists, and the VirusTotal detections collectively suggest a high likelihood of phishing activity.

Because the site is offline, active payloads cannot be inspected, and no page title or content has been captured. Defenders should continue to block the domain and its associated IP address, monitor for any re‑registration attempts, and include the host in internal threat‑intel feeds. Additional investigation should be triggered if the domain becomes reachable again, at which point HTTP response codes, page content, and any credential‑harvesting forms should be examined.