mzlisjx[.]us[.]cc

The domain mzlisjx.us.cc is presently flagged as an active generic phishing site and assigned an elevated risk level. It appears on two public security blocklists and is explicitly blocked by the PhishDestroy and OpenPhish feed providers, indicating that multiple threat‑intel sources have identified it as malicious. VirusTotal analysis reports that four of ninety‑one scanning engines returned a malicious verdict, providing concrete vendor‑based confirmation of its hostile nature.

No additional infrastructure data—such as autonomous system number, hosting IP address, SSL certificate details, HTTP response codes, or Safe Browsing verdicts—are present in the current intelligence, leaving those attributes unverified. Defenders should ensure that mzlisjx.us.cc is added to local deny lists and that any outbound or inbound traffic to the domain is dropped at the network perimeter. Organizations employing web‑filtering or DNS‑sinkhole solutions that ingest PhishDestroy or OpenPhish feeds will already block the domain, but administrators must verify that these feeds are actively enabled and that policy updates have propagated across all enforcement points.

Continuous monitoring is advised: security teams should watch for changes in the number of vendor detections on VirusTotal, for appearance on additional blocklists, and for any new hosting or certificate information that may emerge. Given the domain’s presence on multiple reputable blocklists and the confirmed malicious detections, it should be treated as a confirmed phishing indicator, incorporated into incident‑response playbooks, and used to enrich detection rules for credential‑theft investigations.