hwv[.]ixm[.]mybluehost[.]me

Analysis of the domain hwv.ixm.mybluehost.me indicates active phishing infrastructure as of July 25, 2026. The domain was registered on December 26, 2025, through Domain.com and is hosted on IP address 69.6.192.1, located in Spain under AS31898 (Oracle Corporation). The domain's nameservers are ns1.mybluehost.me and ns2.mybluehost.me, consistent with Bluehost's hosting environment. A 302 HTTP redirect status is currently observed, suggesting the domain may be part of a larger redirection chain or staging phase for malicious activity.

The page title 'Welcome — Próximamente' (Spanish for 'Coming Soon') is a common placeholder used in phishing campaigns to mask the true intent of the site until deployment. No specific brand impersonation is evident from the available data, though the use of a 'coming soon' placeholder is frequently associated with phishing pages awaiting final content or credentials harvesting scripts. The domain appears on one security blocklist, and nine out of ninety-three security vendors on VirusTotal flag it as malicious, reinforcing its classification as high-risk. The SSL certificate is issued by Sectigo Limited (Sectigo Public Server Authentication CA DV R33), a common certificate authority used by both legitimate and malicious sites.

MX records point to mail.hwv.ixm.mybluehost.me, indicating potential email infrastructure for phishing or spam distribution. Defenders should treat this domain as part of an active phishing operation and monitor for further developments, including changes in HTTP status, page content, or additional blocklist inclusions. Network-level blocking of the IP 69.6.192.1 and the domain itself is recommended to mitigate potential exposure.