relaxmurmur[.]com

Analysis of relaxmurmur.com indicates a high-risk generic phishing domain active as of July 12, 2026. The domain was registered on February 21, 2026, through Global Domain Group LLC and currently resolves to IP address 70.34.200.222. It appears on two security blocklists (PhishDestroy and BLP-Malware) and is referenced in 22 threat intelligence pulses on AlienVault OTX. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites. Detected technologies include Bootstrap, Nginx, Handlebars, Lightbox, jQuery, HSTS, and Clipboard.js, which are frequently used in phishing kits for rapid deployment and user interaction. VirusTotal reports that 2 out of 95 security vendors flag this domain, though the specific detection context remains unverified. The page title 'relaxmurmur' provides no clear indication of a targeted brand or service, and no additional content analysis has been conducted to confirm the phishing theme. Gridinsoft assigns a trust score of 0/100, reinforcing its classification as malicious. Defenders should treat this domain as actively hostile. Block resolution at the DNS or proxy level, and monitor for connections to 70.34.200.222 or related infrastructure. If internal logs show user visits, initiate credential reset procedures for potentially exposed accounts. Further investigation may reveal additional linked domains or IPs sharing the same registration or hosting patterns.