actua-bhdlogisecur23[.]yzz[.]me

Analysis of actua-bhdlogisecur23.yzz.me indicates that the domain is actively being used for phishing. The domain was registered on August 07, 2022 through Porkbun LLC and continues to resolve to the IPv4 address 185.27.134.102. Google Safe Browsing has classified the site under the social engineering category, and the domain appears on at least one public blocklist. Independent threat‑intelligence feeds, including PhishDestroy, have already added the domain to their blocklists, confirming that it is being leveraged in malicious campaigns.

VirusTotal scans show that 12 of 91 security vendors have flagged the domain as malicious, providing additional corroboration of its hostile intent. The domain’s authoritative name server information could not be resolved (NS_NOT_FOUND), which limits visibility into its DNS configuration and may be an intentional attempt to obscure hosting details. No public SSL certificate information, HTTP response codes, or page title data are presently available, leaving the exact content of the landing page unverified.

Nonetheless, the convergence of registrar data, IP address association, safe‑browsing classification, blocklist entries, and multi‑vendor detections establishes a high confidence that the domain is being used for phishing. Defenders should block traffic to 185.27.134.102 and to the domain itself at the network perimeter, update intrusion‑detection signatures, and monitor for any related command‑and‑control traffic. Continuous re‑evaluation is advised in case additional indicators, such as malicious payload hashes or phishing email samples, become available.