mdsspares[.]co[.]za

On July 19, 2026, mdsspares.co.za was observed delivering an HTTP 200 response with the page title “Domains & Web Hosting South Africa - Moila Hosting”. The domain resolves to the IPv4 address 41.216.184.165. It appears on one security blocklist and is actively blocked by PhishDestroy. In AlienVault OTX the domain is referenced in three separate threat‑intel pulses, suggesting prior use in malicious campaigns. VirusTotal scans report that eight of ninety‑one security vendors flagged the domain, reinforcing the suspicion of malicious activity. The supplied metadata classifies the threat as generic phishing, assigns a high risk level, and marks the status as active. No further technical details such as phishing kits, payloads, or targeted brands have been disclosed, so the exact content and lure employed by the site remain uncertain. Defenders should block traffic to 41.216.184.165, add mdsspares.co.za to domain deny lists, monitor DNS queries for the domain, and review any user reports referencing the “Domains & Web Hosting South Africa” title. Ongoing re‑analysis is recommended to capture any changes in behavior or new indicators of compromise.