tzawccsw[.]xin

The domain tzawccsw.xin is currently active and has been assigned an elevated risk rating. Analysis of public threat‑intelligence feeds shows that six of ninety‑one antivirus and URL‑reputation engines on VirusTotal have flagged the domain as malicious. The same domain is listed on a single external security blocklist and has been explicitly blocked by the PhishDestroy mitigation service.

No additional context such as hosting IP, ASN, registrar, SSL certificate details, HTTP response codes, or page‑title metadata is publicly available at this time, limiting the depth of the technical profile. The absence of further artefacts means that the exact phishing campaign, targeted brand, or credential‑stealing kit employed by the operator cannot be confirmed. Nevertheless, the convergence of multiple independent detections and an active blocklist entry indicates a non‑trivial likelihood that the domain is being used to host a credential‑stealing page or a malicious redirect.

Defenders should add tzawccsw.xin to web‑filter deny lists, enforce DNS‑level sink‑holing where possible, and monitor network traffic for outbound connections to the domain. Endpoint protection solutions that integrate VirusTotal or similar reputation services should be configured to quarantine or block any attempt to resolve or download content from the domain. Continuous re‑evaluation is recommended, as further threat‑intel (e.g., hosting details, observed payloads, or phishing page screenshots) may emerge and refine the incident response posture.