zxzaq[.]com

zxzaq.com is currently flagged as a high‑risk generic phishing infrastructure. The domain was registered on 16 February 2026 through Internet Domain Service BS Corp. and is served by three top‑level nameservers (ns‑canada.topdns.com, ns‑uk.topdns.com, ns‑usa.topdns.com). DNS resolution points to the IPv4 address 65.38.121.27, which remains active as of the report date. The domain appears on one public security blocklist and is explicitly blocked by the PhishDestroy mitigation service.

VirusTotal has recorded 13 positive detections out of 91 submitted scanners, indicating that multiple anti‑malware engines have identified malicious activity associated with the host. No additional public intelligence such as Safe Browsing verdicts, OTX pulses, SSL certificate details, HTTP response codes, or page title information is presently available, limiting the depth of the current profile. Analysis indicates that the combination of recent registration, dedicated top‑level nameservers, and a moderate detection rate is consistent with fast‑flux or short‑lived phishing campaigns that exploit newly created domains to evade reputation accrual. The active IP address should be monitored for anomalous traffic patterns, and any outbound connections to known command‑and‑control infrastructures should be investigated.

Defensive operators are advised to add 65.38.121.27 and zxzaq.com to network‑level deny lists, enforce DNS sink‑holing for the domain, and enable real‑time blocklist updates that include the source blocklist where the domain is listed. Because the site’s content and SSL configuration have not yet been publicly disclosed, continuous scanning with sandbox and URL‑analysis tools is recommended to capture any payloads or credential‑harvesting pages that may appear. Organizations should also review email gateway rules for messages containing links to this domain and apply quarantine or rejection policies as appropriate.