embazados[.]us

This domain, embazados.us, was registered on April 14, 2026, through Sav.com LLC and remains active as of July 21, 2026. Infrastructure analysis reveals it resolves to the IP address 185.221.216.117 and uses Cloudflare nameservers (augustus.ns.cloudflare.com and laura.ns.cloudflare.com). Nine out of ninety-one security vendors on VirusTotal flag the domain as malicious, while Google Safe Browsing classifies it as engaging in social engineering. The domain appears on at least one security blocklist and is actively blocked by PhishDestroy. No specific brand impersonation or phishing kit details are confirmed in available intelligence, though the classification as a generic phishing domain suggests it likely mimics login portals or credential-harvesting pages. Defenders should treat this domain as high-risk and prioritize blocking it at the DNS and network perimeter levels. The use of Cloudflare nameservers may obscure hosting details, but the IP address can be cross-referenced for additional indicators of compromise. Further analysis of HTTP headers, SSL certificates, or sandboxed page loads may provide clarity on the exact phishing methodology, though no such data is currently available. Immediate mitigation steps include adding the domain and its associated IP to deny lists and monitoring for related infrastructure reuse.