hztexoc[.]com

This domain, hztexoc.com, is identified as a credential theft operation targeting users through deceptive login prompts or fake authentication portals. Analysis indicates the site likely harvested usernames, passwords, or session tokens by mimicking legitimate services, a common tactic in account compromise campaigns. The infrastructure and page title (HZTEX) suggest no affiliation with any recognized brand, increasing the risk of undetected fraud. Infrastructure analysis reveals the domain was registered on July 26, 2025, through Dominet (HK) Limited, a registrar frequently associated with malicious activity. At the time of assessment, 4 out of 95 security vendors on VirusTotal flagged the domain as malicious, while two independent security blocklists (ScamSniffer and PhishDestroy) had already listed it. The domain resolved to the IP address 43.217.109.93, which has been linked to other phishing campaigns in recent months. If you visited hztexoc.com or entered any credentials on the site, immediately reset passwords for all accounts where the same credentials were used. Enable multi-factor authentication (MFA) on critical services, such as email, financial platforms, and cloud storage, to mitigate unauthorized access. Monitor account activity for unusual logins or transactions, and report any suspicious behavior to the affected service provider. Clear browser cache and cookies to remove any residual tracking scripts, and consider running a scan with updated security tools to detect potential malware.