westpacbusinesshelp[.]com

westpacbusinesshelp.com was registered on February 6 2026 through OwnRegistrar, Inc. The domain resolves to the IPv4 address 192.142.55.88, which is allocated to Ultahost, Inc. in the Netherlands under ASN 214036. The authoritative name servers are ALDO.NS.CLOUDFLARE.COM and SUMMER.NS.CLOUDFLARE.COM, indicating the use of Cloudflare’s DNS service. TLS termination is provided by a Sectigo RSA Domain Validation Secure Server CA certificate, confirming that the site presented a valid SSL certificate at the time of observation.

The site was flagged by PhishDestroy and subsequently taken offline, and it currently appears on one public security blocklist. VirusTotal scans show that 18 of 95 security vendors classified the domain as malicious, reinforcing the suspicion of phishing activity. No public page title or Safe Browsing verdict is available, so the exact content served by the site remains unknown.

The combination of recent registration, dedicated hosting, a valid SSL certificate, and multiple vendor detections suggests a purpose‑built phishing infrastructure targeting Westpac business customers. Defenders should add the domain and its IP address to outbound and inbound filtering rules, monitor for any re‑registration attempts, and consider extending blocklist coverage to include the associated Cloudflare name servers. Ongoing surveillance of Ultahost, Inc. traffic and rapid response to any resurgence of the domain are recommended.