mirexalvonta-quendrixolis[.]live

This domain, mirexalvonta-quendrixolis.live, is flagged as a generic phishing threat designed to harvest user credentials through deceptive login interfaces. Analysis indicates the infrastructure is engineered to mimic legitimate authentication portals, tricking victims into submitting sensitive information such as usernames, passwords, and multi-factor authentication codes. The domain employs social engineering tactics, including cloned branding and urgent prompts, to increase the likelihood of successful credential theft. Such harvested data is typically exploited for unauthorized account access, financial fraud, or further targeted attacks against individuals or organizations. Infrastructure analysis reveals the domain was registered on February 14, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.96.3, hosted on AS13335 (Cloudflare, Inc.), a network commonly used to obscure malicious infrastructure. The domain appears on one security blocklist and is currently blocked by at least one threat intelligence feed. VirusTotal reports 0 detections out of 95 engines, suggesting the threat is either new or employs evasion techniques to avoid detection. The absence of an SSL certificate further indicates a lack of basic security measures, increasing the likelihood of interception or tampering during data transmission. Users who have visited mirexalvonta-quendrixolis.live or entered credentials on the site should immediately revoke any submitted information. Change passwords for all accounts where the same credentials were used, prioritizing financial, email, and work-related services. Enable multi-factor authentication on all critical accounts to mitigate the risk of unauthorized access. Monitor accounts for suspicious activity, such as unrecognized logins or transactions, and report any anomalies to the respective service providers. If corporate credentials were exposed, notify the organization’s security team to initiate incident response protocols. Avoid interacting with the domain or any associated links, and update endpoint security tools to detect and block future encounters with this threat.