mzcrochet[.]com

Analysis of the domain mzcrochet.com indicates that it is currently active and has been classified as a generic phishing operation. The domain was registered on March 03, 2024 through NameCheap, Inc., and uses the authoritative name servers dns1.namecheaphosting.com and dns2.namecheaphosting.com. DNS resolution points to the IPv4 address 158.94.209.40, which is the sole host associated with the domain in public records.

The domain appears on one security blocklist and is explicitly blocked by the PhishDestroy service, confirming that at least one reputable anti‑phishing feed has identified it as malicious. VirusTotal has processed the domain with 91 vendor scans; none of the vendors reported a detection, but the report emphasizes that a lack of detections does not constitute evidence of safety. The domain’s risk level is listed as “under investigation,” and its status remains active as of the report date, July 21, 2026.

No additional intelligence such as SSL certificate details, HTTP response codes, page titles, or brand targeting is available, leaving the exact phishing payload and victim profile unverified. Defenders should consider adding mzcrochet.com to deny‑list rules at network perimeters, DNS filtering solutions, and endpoint protection policies. Continuous monitoring of the associated IP address 158.94.209.40 and periodic re‑evaluation of threat intelligence feeds are recommended to detect any changes in the domain’s behavior or detection status.