puvuhice75[.]com

Analysis of puvuhice75.com indicates active infrastructure supporting a generic phishing operation. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IPv4 address 178.16.54.222, which is geolocated to the Netherlands and listed as belonging to Omegatech LTD. DNS resolution is provided by ns3.my-ndns.com and ns4.my-ndns.com. HTTPS is served with a valid Let’s Encrypt certificate (YR2), but the web server returns an HTTP 302 redirect, a pattern commonly used to forward victims to credential‑harvesting pages. The domain appears in a single AlienVault OTX pulse and is present on one external blocklist; PhishDestroy also lists it as blocked. VirusTotal scans show six of ninety‑one security vendors flagging the domain, reinforcing the malicious assessment. The evidence confirms that the domain is currently active and being used for phishing, but the exact payload, target brand, and landing page content have not been publicly disclosed. Defenders should add the domain and its associated IP address to blocklists, monitor DNS queries for the listed nameservers, and enforce TLS inspection to capture the redirect behavior. Continuous re‑evaluation is advised in case additional indicators emerge.