ht1[.]ht[.]htamzoj[.]icu

Analysis indicates that the domain ht1.ht.htamzoj.icu is currently active and has been identified as a generic phishing host. The domain was registered on December 23, 2025 through Chengdu west dimension digital technology Co., LTD and is served by the authoritative name servers ns5.myhostadmin.net and ns6.myhostadmin.net. DNS resolution points to the IPv4 address 154.92.22.53, which is the sole hosting endpoint observed. VirusTotal reports that fifteen of ninety‑five scanned security vendors flag the domain as malicious, demonstrating moderate consensus among automated scanners. The domain is listed on one public blocklist and is actively blocked by the PhishDestroy service. No additional intelligence such as Safe Browsing verdicts, OTX indicators, SSL certificate details, or HTTP response codes is available at this time. Consequently, the exact content and targeted brand of the phishing page remain unknown, limiting attribution of the lure. Defenders should prioritize adding the IPv4 address and the fully‑qualified domain name to perimeter deny lists, enforce DNS sink‑hole rules for the associated name servers, and monitor for any new resolution changes. Continuous re‑scanning with multi‑vendor engines is advised to capture updates to detection status. Given the high risk rating and active blocklist presence, organizations handling credential‑sensitive traffic should treat any connection attempts to this host as malicious and investigate associated logs for potential compromise attempts.