linkpub70[.]xyz

This domain, linkpub70.xyz, is actively engaged in phishing operations designed to mimic legitimate link-shortening services. Analysis indicates the site likely redirects victims to fraudulent pages, harvests credentials, or delivers malicious payloads under the guise of a benign URL shortener. The lack of a recognizable brand in the page title suggests a generic but scalable phishing infrastructure, increasing the risk of widespread exploitation across multiple campaigns. Infrastructure analysis reveals the domain was registered on June 25, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. As of the latest scan, VirusTotal reports 3 out of 95 security vendors flagging this domain as malicious. Additionally, AlienVault OTX lists it in one threat intelligence pulse, further corroborating its association with malicious activity. The domain resolves to the IP address 188.114.96.3, which may host additional phishing or malware distribution sites. Users who have visited linkpub70.xyz should immediately cease all interaction with the domain. If credentials were entered, reset passwords for all potentially affected accounts, particularly those sharing the same password. Monitor financial and communication platforms for unauthorized activity, as phishing sites often target email, banking, and social media logins. Network administrators should block the domain and its resolving IP at the perimeter to prevent further exposure. Consider deploying endpoint detection rules to identify any systems that may have communicated with this infrastructure.