meluxuryrentals[.]com

This domain, meluxuryrentals.com, is identified as an active credential harvesting phishing site targeting users through deceptive luxury rental offers. Analysis indicates the site is designed to mimic legitimate rental platforms, tricking visitors into submitting sensitive login credentials, payment details, or personal information under false pretenses. The infrastructure and content are engineered to exploit trust in high-end service providers, a common tactic in targeted phishing campaigns. Infrastructure analysis reveals multiple high-confidence threat indicators. The domain was registered on November 09, 2025, through NAMECHEAP INC, a registrar frequently exploited for malicious registrations due to its accessibility and low-cost services. It resolves to the IP address 203.161.35.226, which has been associated with prior phishing activity. Security vendors have flagged the domain on VirusTotal, with 11 out of 95 engines detecting malicious behavior. Additionally, the domain appears on two security blocklists and is referenced in one threat intelligence pulse on AlienVault OTX. The SSL certificate, issued by Let's Encrypt, provides basic encryption but does not validate the legitimacy of the site, as phishing domains commonly use free certificates to appear secure. Users who have visited meluxuryrentals.com or interacted with its content should take immediate action to mitigate potential compromise. Any credentials, payment details, or personal information entered on the site should be considered exposed. Users are advised to change passwords for any accounts associated with the submitted data, enable multi-factor authentication where available, and monitor financial statements for unauthorized transactions. System scans using updated security tools are recommended to detect any malware or tracking scripts that may have been deployed. Organizations should update their blocklists to include this domain and its associated IP address to prevent further exposure.