ggg[.]ixo[.]mybluehost[.]me

PhishDestroy identifies ggg.ixo.mybluehost.me as an active credential theft phishing domain currently propagating under an elevated risk profile. The infrastructure is leveraging a recently observed campaign to harvest user credentials under false pretenses, with domain resolution and SSL certificate provisioning already in place to enhance authenticity. As of seed 6c4f7a, this domain remains unaddressed by several major browsers and security platforms, enabling continued access by unsuspecting victims.

This domain was flagged by 5 of 95 VirusTotal security vendors, registered through Domain.com on October 05, 2016, and resolves to IP 69.6.192.42. It carries a Let’s Encrypt SSL certificate for HTTPS credibility and appears on 1 public blocklist, including OpenPhish. Domain reputation metrics indicate low trust, with minimal historical clean records and no legitimate business associations on file.

Given the active status and elevated risk, immediate containment is advised. Security teams should block the domain at DNS and network levels, revoke any allowlisted entries, and scan endpoints for prior exposure. End users should avoid interacting with links or attachments referencing ggg.ixo.mybluehost.me and report any suspected contact to their security operations center for forensic follow-up.