saz[.]pxv[.]mybluehost[.]me

The domain saz.pxv.mybluehost.me is classified as a high‑risk generic phishing site and remains active as of the report date. Infrastructure analysis shows the domain was registered on February 21, 2026 and resolves to the IP address 69.6.192.1, which is geolocated to Spain and associated with AS31898, an Oracle Corporation network. The authoritative name servers are ns1.mybluehost.me and ns2.mybluehost.me, and an MX record points to mail.saz.pxv.mybluehost.me. TLS is provided by a Sectigo Limited DV R36 certificate, indicating a standard domain‑validated certificate without extended validation. HTTP requests return a 302 redirect, yet the final page title observed is "404 Not Found," suggesting a broken or placeholder landing page. VirusTotal reports nine out of ninety‑three scanners flagging the domain, and it is listed on a single security blocklist. Additional reputation data include a Gridinsoft trust score of zero out of one hundred and confirmation that the domain is blocked by PhishDestroy. While the exact phishing payload or target page content has not been captured, the convergence of redirection behavior, low trust score, and multiple vendor detections supports a high confidence assessment of malicious intent. Defenders should immediately block the domain and its associated IP at perimeter and endpoint controls, monitor for any related mail traffic to the listed MX host, and incorporate the domain into threat‑intel feeds to prevent future compromise. Continuous re‑evaluation is advised should additional indicators, such as payload samples or victim reports, become available.