195zzzz[.]com

This domain, 195zzzz.com, is identified as a generic phishing site with no specific brand impersonation or crypto drainer kit association. Analysis indicates the infrastructure was designed for broad credential harvesting or malicious redirection, though no targeted brand or service was evident from available artifacts. The page title, matching the domain name, suggests a lack of sophisticated obfuscation, consistent with low-effort phishing operations. Infrastructure analysis reveals the domain was registered on November 27, 2020, through GoDaddy.com, LLC, and resolved to the IP address 103.143.28.214, hosted in Hong Kong under AS135581. VirusTotal detections show 19 out of 95 security vendors flagging the domain as malicious. The SSL certificate, issued to 'Default Company Ltd,' further indicates minimal effort to establish legitimacy. The domain appears on one security blocklist and was previously blocked by at least one threat intelligence feed. No association with Google Safe Browsing (GSB) was recorded at the time of analysis. The domain is currently offline, reducing immediate risk to end users. However, historical indicators suggest the infrastructure may be repurposed or reactivated under a different domain. Organizations should monitor for related IOCs, including the IP address and registrar details, and consider proactive blocking of the domain in security controls. Remaining risk is classified as elevated due to the domain's age, prior malicious activity, and potential for reuse in future campaigns.