mega-site-mori[.]com

As of July 30, 2026, the domain mega-site-mori.com is under investigation for potential involvement in credential theft operations. This domain is currently active and was registered on July 19, 2026, via Fewmoretaps OU operating as Trustname.com. DNS resolution indicates the domain points to IP address 104.21.45.161, utilizing nameservers igor.ns.cloudflare.com and jean.ns.cloudflare.com, which is consistent with common practices for threat actors leveraging Cloudflare protection to obscure hosting details.

Analysis shows that mega-site-mori.com has been flagged on one security blocklist, specifically by PhishDestroy, indicating that at least one threat intelligence provider has assessed the domain as malicious. However, the domain is not currently flagged by 91 vendors on VirusTotal; it is important to note that a lack of detections is not confirmation of safety, as threat campaigns often leverage new infrastructure before widespread recognition occurs. There is no additional evidence available regarding Safe Browsing status, OTX reputation, or trust scores. The specific content or intended brand target of this domain has not been analyzed, and no page title or scam kit details are present in the current intelligence.

Given the domain's recent registration, active status, and presence on a specialized phishing blocklist, defenders are advised to monitor for signs of credential harvesting or related phishing activity originating from this infrastructure. Security teams should consider implementing proactive DNS and email security controls to block traffic to mega-site-mori.com pending further analysis. Ongoing monitoring for new detections or changes in reputation across major intelligence sources is recommended. If any user or system attempts access, full network and endpoint investigation is warranted to contain potential compromise.