best-mix[.]club

Analysis of best-mix.club confirms its classification as a generic phishing domain with elevated risk indicators. The domain was registered on February 21, 2026, through NameCheap, Inc., and resolved to IP address 67.223.118.133, hosted on AS22612 (Namecheap, Inc.) in the United States. Infrastructure analysis reveals the use of LiteSpeed web server technology and nameservers dns1.namecheaphosting.com and dns2.namecheaphosting.com. The SSL certificate is issued by Sectigo Limited under the Sectigo RSA Domain Validation Secure Server CA, a common certificate authority for both legitimate and malicious domains. Detection data indicates the domain was flagged by two of 93 security vendors on VirusTotal, though the specific detection context remains unverified.

It appears on one security blocklist and was blocked by PhishDestroy. AlienVault OTX records the domain in a single threat intelligence pulse, suggesting limited but confirmed malicious activity. Gridinsoft assigned a trust score of 0/100, reinforcing its high-risk classification. As of July 24, 2026, the domain is offline, though this status may change without notice. No specific brand target, phishing kit, or scam type has been identified in available data.

The exact content and intended victim profile remain unconfirmed due to the domain's current offline status. Defenders are advised to treat best-mix.club as a confirmed phishing threat and maintain blocklist entries. Monitoring for reactivation or changes in hosting infrastructure is recommended, particularly given its association with a known registrar frequently used for malicious domains. Further analysis should focus on historical WHOIS records and any available web archive captures to determine the nature of the phishing campaign.