m[.]allinonegalaxy[.]com

Analysis as of July 22, 2026 indicates that the domain m.allinonegalaxy.com is actively being used for malicious activity. The domain was registered through NameSilo, LLC on June 03, 2026 and resolves to the IPv4 address 87.85.108.78. Its authoritative nameservers are ns1.domainnamedns.com and ns2.domainnamedns.com.

VirusTotal records show that 13 of 95 security vendors have flagged the domain, suggesting that a notable portion of scanning engines have identified it as malicious. The domain is currently listed on two public blocklists and is explicitly blocked by PhishDestroy and OpenPhish, reinforcing the assessment of high risk. No additional metadata such as SSL certificate details, HTTP response codes, or page title information is available at this time, leaving the exact content and lure techniques unverified.

The lack of public page analysis means defenders cannot confirm the specific phishing vector, but the presence on multiple blocklists and vendor detections confirms a credible threat. Recommended defensive actions include adding m.allinonegalaxy.com and its IP address 87.85.108.78 to outbound and inbound blocklists, monitoring DNS queries for the domain and its nameservers, and employing URL filtering solutions that reference the blocklists reporting this domain. Continuous re‑evaluation is advised, as changes to the hosting infrastructure or content could alter the threat profile.