mxx777[.]net

The domain mxx777.net has been identified as a brand impersonation phishing site targeting Google. Analysis indicates the domain is currently offline, though it previously hosted content masquerading as legitimate Google services. The page title, 'ManBetX(万博体育)官网|英超狼队和水晶宫全球赞助伙伴,' suggests an attempt to deceive users into believing the site was associated with a sports betting platform, which is inconsistent with Google's core services and further supports the phishing classification. Technical indicators confirm the malicious nature of this domain. It was flagged by 19 of 95 security vendors on VirusTotal, and appears on two independent security blocklists. The domain was registered on January 10, 2020, through NameCheap, Inc., and resolves to the IP address 172.65.201.65, hosted on Cloudflare's infrastructure (AS13335). The SSL certificate is issued by Google Trust Services under the identifier WE1, which may have been leveraged to lend an appearance of legitimacy. Despite its current offline status, the domain's historical activity and detection metrics warrant elevated scrutiny. Given the domain's history and technical indicators, organizations and individuals are advised to treat mxx777.net as a confirmed phishing threat. Network administrators should ensure the domain is blocked at the DNS and firewall levels to prevent accidental access. Users who may have interacted with the domain should verify their accounts for unauthorized activity and reset credentials if necessary. Continuous monitoring of related infrastructure, including associated IP ranges and SSL certificates, is recommended to mitigate potential follow-up threats from the same operators.