360mpa[.]com

Analysis of 360mpa.com as of July 19, 2026, confirms its classification as a high-risk phishing domain. The domain resolves to IP address 76.223.67.189, hosted on AWS Global Accelerator infrastructure in the United States. Infrastructure analysis reveals nameservers ns35.domaincontrol.com and ns36.domaincontrol.com, consistent with GoDaddy-managed DNS. The domain was registered through Wild West Domains, LLC, and remains active with an HTTP 200 status response, indicating operational hosting. Security vendor assessments on VirusTotal show 8 of 91 engines flagging the domain as malicious, though the specific phishing kit or targeted brand is not yet identified in available intelligence. The SSL certificate is issued by GoDaddy (GoDaddy TLS Intermediate CA DV - R1v1), a common provider for both legitimate and malicious domains. The domain appears on one security blocklist and is currently blocked by PhishDestroy. Defenders should treat 360mpa.com as an active phishing threat. Recommended actions include blocking the domain at DNS and proxy layers, monitoring for connections to the associated IP 76.223.67.189, and investigating any internal systems that have accessed this domain. Given the lack of confirmed brand targeting or phishing kit identification, further analysis of captured traffic or payloads is advised to determine the exact nature of the credential harvesting operation.