aaa[.]pfz[.]mybluehost[.]me

This domain is flagged as a high-risk generic phishing site and remains active as of July 12, 2026. It was created on October 5, 2016, and resolves to IP address 69.6.192.126, hosted in Spain (ES) on AS31898 (Oracle Corporation). The domain appears on two security blocklists, PhishDestroy and PhishingDB, and is flagged by 15 of 95 security vendors on VirusTotal. SSL certificate is issued by Sectigo Limited (Sectigo Public Server Authentication CA DV R36). The page title matches the domain name (aaa.pfz.mybluehost.me), and HTTP status returned is 302. MX records point to mail.aaa.pfz.mybluehost.me. Nameservers are ns1.mybluehost.me and ns2.mybluehost.me. The domain is registered through Domain.com - Network Solutions, LLC. Gridinsoft trust score is 0/100 and Scamadviser trust score is 1/100, confirming low trustworthiness. The exact phishing content or target brand has not yet been analysed, but the domain's presence on multiple blocklists and low trust scores indicate active malicious use. Defenders should block this domain at the network level, add the IP 69.6.192.126 to threat intelligence feeds, and monitor for any associated subdomains or email traffic from mail.aaa.pfz.mybluehost.me. No further details about the phishing kit or impersonated brand are available from the current data.