mixgura[.]money

The domain mixgura.money is currently active and was registered on 21 February 2026 through NiceNIC International Group Co., Limited. DNS resolves to 188.114.97.3, an address owned by AS13335 Cloudflare, Inc. in the United States. The site serves HTTP 200 responses and advertises a page title of "MIXTURA". Technical fingerprints show a Node.js runtime behind an Express framework, protected by Cloudflare's edge services with HTTP/3 support and a Google Trust Services / WE1 TLS certificate. The domain appears on a single security blocklist and is flagged by PhishDestroy. VirusTotal scans report 6 of 95 security vendors flagging the host, and the Gridinsoft trust score is 0/100, indicating a high likelihood of malicious use. The combination of recent registration, low trust score, and multiple vendor detections aligns with the classification of generic phishing. At present, no additional content analysis is available beyond the page title. Defenders should consider adding mixgura.money to DNS and URL filtering policies, monitor for outbound connections to the associated IP, and update intrusion-detection signatures to capture traffic to the identified Cloudflare endpoint. Continuous observation is advised to detect any evolution of the infrastructure or payload delivery mechanisms.