loomizbk[.]com[.]mazcapitals[.]com

This domain, loomizbk.com.mazcapitals.com, is currently flagged as a high‑risk generic phishing site. Analysis of public threat feeds shows that PhishDestroy has already added the domain to its blocklist, and at least one additional security blocklist also lists it. VirusTotal reports that 10 out of 91 scanned security vendors have identified the domain as malicious, confirming its reputation as a phishing resource. The domain resolves to name servers ns17.asurahosting.com, ns17.my-control-panel.com and ns18.asurahosting.com, indicating that the infrastructure is hosted by Asura Hosting services.

An HTTP request to the domain returns a 302 redirect, a common technique used to forward victims to credential‑harvesting pages or to mask the final landing site. Registration data reveals that the domain was acquired through Global Domain Group LLC, a registrar that is frequently observed in malicious registrations. The domain remains active as of the report date, July 27 2026, and its risk level is classified as high. Defenders should ingest the domain into network and endpoint detection rules, enforce DNS‑based blocking, and ensure that any web‑proxy or URL filtering solutions reference the latest blocklists that contain this indicator.

Because the domain is already flagged by multiple vendors, adding it to existing threat‑intel feeds will reduce the likelihood of successful phishing attempts. Continuous monitoring of the associated name servers and the parent domain mazcapitals.com is advisable, as adversaries often reuse infrastructure for additional campaigns. In environments where credential exfiltration is a concern, organizations should scrutinize outbound connections to the IP addresses resolved from the listed name servers and consider applying URL‑allow‑list policies that exclude this subdomain.