588gjasaaxax[.]shop

This domain, 588gjasaaxax.shop, is currently active and classified as a generic phishing site. The authoritative name servers a4.share-dns.com and b4.share-dns.net resolve the host to IP 83.229.124.67, which is located in Hong Kong under the S G IX exchange. Registration records indicate the domain was created through GNAME.COM PTE. LTD. The TLS certificate is issued by Let’s Encrypt (YE1) and the HTTP response returns a 301 redirect to a page whose title is “401 Authorization Required”. Threat‑intelligence sources cite the domain in seven AlienVault OTX pulses and 18 of 91 security vendors on VirusTotal have flagged it. It appears on one public blocklist and is listed as blocked by PhishDestroy. The available data confirm malicious infrastructure but the exact payload or targeted brand has not been disclosed. Analysts should add the domain and its resolving IP to outbound filtering rules, monitor for future resolution changes, and ensure that any inbound traffic from the associated IP range is inspected. Continued observation is recommended to detect any evolution of the campaign.