reutilizemais[.]co[.]mz

The domain reutilizemais.co.mz was registered on 19 April 2026 and resolves to the IPv4 address 196.3.100.162, which is geolocated to Mozambique (MZ) and belongs to the 100.24/24 UEM network segment. The authoritative name servers are ns7.ciuem.mz and ns8.ciuem.mz. An HTTPS service is presented using a Let's Encrypt certificate (R13) and the web server returns HTTP 200 for the root path, with the page title identical to the domain name. Threat intelligence classifies the site as a generic phishing operation that functions as a crypto drainer, and the Gridinsoft trust score for the host is 0 / 100. The domain appears on two public blocklists, PhishDestroy and URLhaus, and 21 of 94 security vendors on VirusTotal have flagged it. The current risk rating is high, the seed identifier is cf1df9, and the incident remains active. While the exact phishing lure, victim profile, and malware payload have not been disclosed, the combination of a fresh registration, low trust score, active blocklist listings, and multiple vendor detections indicates a high likelihood of credential or cryptocurrency theft. Defenders should block the domain at the DNS and web‑filter level, monitor outbound connections to 196.3.100.162, and include the host in threat‑intel feeds. Additional analysis of the page content and any associated URLs is required to determine the full scope of the campaign.