fix95400073[.]world

The domain fix95400073.world was registered on June 12, 2026 through Atak Domain Bilgi Teknolojileri A.Ş. and is currently classified as an active generic phishing infrastructure with an elevated risk rating. DNS resolution points exclusively to the IPv6 address 2606:4700:3035::ac43:ca58, which is hosted on a network that appears on a single security blocklist. Independent verification shows the domain is listed by PhishDestroy, confirming its presence on at least one anti‑phishing feed.

VirusTotal analysis indicates that 11 of 91 scanning engines have raised detections against the domain, suggesting a modest but notable level of consensus among security vendors. No additional public intelligence such as SSL certificate details, HTTP response codes, page titles, or observed brand targeting is presently available, limiting the depth of content‑level attribution. The lack of visible page metadata means defenders cannot yet confirm the specific phishing lure or credential‑collection mechanisms employed. Given the documented registration data, confirmed blocklist presence, and vendor detections, security teams should proactively deny network connections to the IPv6 host and add fix95400073.world to local URL filtering and DNS sinkhole policies.

Continuous monitoring of traffic directed to the associated address block is advised, as well as periodic re‑scanning of the domain for changes in content or detection scores. Coordination with upstream providers to enforce blocking at the edge can further reduce exposure. Until additional payload or landing‑page evidence is released, the domain should be treated as a high‑confidence phishing indicator and incorporated into broader threat‑intel feeds for downstream security tooling.