test[.]macguarie[.]com

This domain, www.test.macguarie.com, was designed to deceive visitors into disclosing sensitive login credentials by mimicking the legitimate Macquarie brand. Analysis indicates the site targeted users through brand impersonation, likely harvesting usernames, passwords, or other authentication details for unauthorized access to financial or corporate accounts. The absence of an SSL certificate further increased the risk of data interception during transmission, while the domain’s recent creation and suspicious infrastructure heightened its threat profile. Infrastructure analysis reveals the domain was registered on May 21, 2025, through GMO Internet, Inc., and resolved to the IP address 186.2.175.33, hosted in Belize under AS59692 (IQWeb FZ-LLC). Security vendors flagged the domain as malicious, with 17 out of 95 engines on VirusTotal detecting it as a phishing threat. The domain appeared on one security blocklist and was subsequently taken offline, though its prior activity suggests it may have successfully targeted unsuspecting users during its operational window. If you visited www.test.macguarie.com or entered any credentials on the site, immediately change passwords for all accounts where the same credentials were used, particularly those associated with financial services or corporate systems. Enable multi-factor authentication (MFA) on all critical accounts to mitigate the risk of unauthorized access. Monitor accounts for suspicious activity, such as unrecognized transactions or login attempts, and report any anomalies to the affected service provider. Organizations should block the domain and its associated IP (186.2.175.33) at the network level to prevent further exposure. Users should also verify the legitimacy of any unexpected communications purporting to be from Macquarie or similar brands, as phishing campaigns often reuse infrastructure for follow-up attacks.