medilens[.]uz

medilens.uz is currently flagged as a generic phishing infrastructure. The domain was registered on May 08, 2026 through the registrar SUVAN NET and is hosted on the IP address 37.153.159.13. DNS resolution uses the authoritative servers dns1.ahost.uz and dns2.ahost.uz, both of which resolve to 37.153.159.20 and 91.98.19 respectively. As of the report date, July 20, 2026, the domain appears on a single security blocklist, PhishDestroy, indicating that at least one consortium has taken remediation action. VirusTotal records show that the domain was scanned by 95 AV engines without any positive detections, but the absence of alerts does not confirm benign behavior. The campaign remains active and its risk level is listed as under investigation, reflecting limited public intelligence on the payload or targeted victims. Uncertainty persists regarding the specific phishing page content, credential harvesting mechanisms, and any associated command‑and‑control infrastructure. Defenders should consider adding the IP address 37.153.159.13 to network‑level deny lists, enforce DNS filtering for the domain, and monitor for any traffic anomalies originating from the listed nameservers. Ongoing telemetry collection and periodic re‑scanning with multi‑engine services are recommended to detect potential changes in malicious behavior.