mlxazs[.]us[.]cc

This domain, mlxazs.us.cc, is flagged as an active phishing threat targeting browser session credentials. Registered through Gname.com Pte. Ltd. on April 7, 2006, the domain remains operational as of July 19, 2026. Infrastructure analysis reveals it resolves to IP address 43.133.41.74, though no autonomous system or geolocation data is currently available for further attribution. The page title, 'New Private Tab,' suggests an attempt to mimic browser-based privacy features, a common tactic to deceive users into entering sensitive information under false pretenses. Security vendor detections on VirusTotal indicate 3 of 95 engines have flagged this domain, providing partial corroboration of malicious intent. However, the exact phishing methodology—whether credential harvesting, session hijacking, or another attack vector—remains unconfirmed due to limited technical analysis of the site's content. No associated phishing kit or targeted brand has been identified in available intelligence. Defenders should treat this domain as high-risk and prioritize blocking or monitoring traffic to 43.133.41.74. Network-level mitigations, such as DNS sinkholing or IP-based firewall rules, are recommended to disrupt potential compromise attempts. Further investigation into the domain's hosting infrastructure and historical DNS records may yield additional indicators of compromise (IOCs) for broader threat hunting. Given the domain's age and persistent activity, it may be part of a larger, long-standing phishing campaign requiring continued vigilance.