navi45[.]com

Analysis indicates that the domain navi45.com was registered on 21 February 2026 and currently resolves to the IPv4 address 186.2.171.13, which is assigned to AS59692 (IQWeb FZ-LLC) located in Belize. The site presented the page title “Navi Roulette” and employed an SSL certificate labeled R11. Threat intelligence sources have identified the domain as a generic phishing vector. Ten of ninety‑three security vendors on VirusTotal flagged the domain as malicious, and the domain appears on two external blocklists that are leveraged by PhishDestroy and DiscordPhishing.

AlienVault OTX has indexed the domain in two separate threat‑intel pulses, reinforcing its classification as a phishing infrastructure. The domain was reported as taken offline at the time of this assessment, but the underlying hosting infrastructure remains observable and may be reused for future campaigns. Defenders should ensure that the IP 186.2.171.13 is added to network deny lists, verify that internal URL filtering solutions incorporate the two blocklists that have already listed the domain, and confirm that SSL inspection policies recognize the R11 certificate as untrusted. Continuous monitoring of the AS59692 prefix for new domain registrations or similar SSL patterns is advised.

Because the domain’s creation date is recent, automated detection rules that flag newly registered domains resolving to the same ASN and exhibiting similar title patterns can help mitigate re‑use. Organizations should also review any outbound traffic logs for connections to the listed IP address during the window prior to takedown, as compromised credentials may have been exfiltrated. The evidence base includes VirusTotal vendor detections, blocklist entries, OTX pulse references, and the observed SSL certificate; no additional behavioral analysis of the page content is available at this time.