amexz[.]siratoriyasu[.]com

Analysis of amexz.siratoriyasu.com indicates that the domain was created on 17 December 2025 and is currently taken offline. The site resolves to the IPv4 address 23.160.193.23, which is routed through AS397270 operated by NetInformatik Inc. in the United States. DNS resolution is handled by the three dnspod.com name servers a.dnspod.com, b.dnspod.com and c.dnspod.com. No TLS certificate is presented, meaning the site would be delivered over plain HTTP if it were reachable. The page title returned by the server is the literal string “amexz.siratoriyasu.com”, providing no additional context about the content or intended victim brand.

Reputable security aggregators have flagged the domain. Google Safe Browsing classifies it as a social‑engineering threat, and the PhishDestroy blocklist lists it as a known phishing host. VirusTotal reports that 20 of 93 scanned security vendors have marked the domain as malicious, reinforcing the suspicion. The Gridinsoft trust score is 0 out of 100, the lowest possible rating, and the registrar listed for the registration is Aceville Pte. Ltd., a provider often observed in malicious registrations. The available evidence corroborates a high‑risk phishing profile, yet the offline status limits immediate observation of payload or credential‑harvesting mechanisms.

Defenders should continue to block the domain at perimeter defenses, update internal blocklists with the identified IP and name‑server information, and monitor for any re‑hosting attempts that may reuse the same infrastructure. Additional scrutiny of traffic to the associated IP range and ASN is advised, as well as periodic re‑scanning should the site become active again. Organizations using web filtering, DNS sinkholing, or endpoint protection should ensure that alerts from Google Safe Browsing, PhishDestroy, and VirusTotal are correlated to accelerate response.