mirai-fundris[.]com

mirai-fundris.com was registered through NETIM SAS on 21 February 2026 and is currently resolving to 104.168.101.30, an address owned by AS36352 HostPapa in the United States. The site returns HTTP 200 and presents a TLS certificate from Let’s Encrypt (YR2) issued for the domain. Service banners reveal Nginx with OpenResty and the IPinfo library, and the authoritative nameservers are ns1.netim.net, ns2.netim.net, and ns3.netim.net. The only visible page title is “ミライ ファンドリス | 日本国公式サイト 2026”, indicating an attempt to masquerade as an official Japanese site for the year 2026. The domain is listed on the PhishDestroy blocklist and appears on one additional security blocklist. VirusTotal analysis shows a single vendor flagging the domain out of 95 scans, and Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The infrastructure is typical of short‑lived phishing operations that leverage reputable registrars and free TLS certificates to gain initial legitimacy. No additional content, payloads, or credential‑harvesting pages have been observed, so the exact phishing vector remains unknown. Defenders should block network resolution to 104.168.101.30, add mirai-fundris.com to URL filtering rules, and monitor for any outbound traffic that matches the domain’s User‑Agent strings or TLS fingerprints. Continuous re‑scanning of the host is recommended to detect any future payload deployment.