phone-locateshgkln[.]info

The domain phone-locateshgkln.info was registered on July 27, 2026 through NameSilo, LLC and is currently hosted on the nameservers cns59.webhostbox.net and cns60.webhostbox.net. DNS resolution points to the IPv4 address 96.125.163.17. The domain appears on a single security blocklist and is listed as blocked by PhishDestroy, indicating that at least one external mitigation service has identified it as malicious.

VirusTotal analysis shows that six of ninety‑one scanned security vendors have flagged the domain, confirming a modest but non‑trivial detection rate across independent scanners. No additional intelligence such as page titles, SSL certificate details, or HTTP response codes is available at this time, so the exact content and any impersonated brand remain unverified. The short lifespan—creation only three days prior to the report date—and the active status suggest the operators are actively exploiting the newly registered domain.

Defenders should add 96.125.163.17 to network‑level deny lists and consider blocking phone-locateshgkln.info at DNS filtering points. Monitoring for any outbound connections to the IP or DNS queries for the domain is recommended, as is continuous re‑evaluation of VirusTotal and blocklist feeds for updated detection counts. Because the site’s payload and target audience have not been publicly disclosed, threat‑hunting teams should treat any traffic to the domain as suspicious and apply standard phishing mitigation controls, including user education, email gateway filtering, and endpoint detection rules that flag attempts to resolve or contact the domain.