wh1542972[.]ispot[.]cc

The domain wh1542972.ispot.cc was registered through TUCOWS.COM, CO, and its creation timestamp is 24 October 2014. It is currently delegated to three InterServer name servers (cdns1.interserver.net, cdns2.interserver.net, cdns3.interserver.net) and resolves to the IPv4 address 216.158.235.226. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, indicating that at least one anti‑phishing community has observed malicious activity associated with this FQDN. A VirusTotal scan was performed by 91 independent scanners; none of the engines reported a detection, but the absence of a flag does not confirm benign intent and should be interpreted only as a lack of current signatures. No public Safe Browsing, Open Threat Exchange, SSL certificate, HTTP status, or trust‑score data were available for this host, and the page title has not been captured, leaving the exact content of the site unknown. The evidence therefore consists of registration details, name‑server configuration, IP resolution, blocklist presence, and the PhishDestroy block. Given the classification as a generic phishing threat, defenders should treat the domain as hostile until further analysis clarifies its payload. Recommended actions include adding the domain to outbound filtering rules, monitoring DNS queries for the IP 216.158.235.226, and, where possible, employing sink‑hole or sandbox analysis to capture any payloads that may be delivered. Continuous re‑evaluation is advised, as the risk level remains under investigation and additional intelligence may emerge from future scans or community reports.