minion178-1[.]cc

This domain, minion178-1.cc, was registered on March 14, 2026 through NameCheap, Inc. and currently resolves to the IPv4 address 66.29.132.107, which is owned by AS22612 operated by Namecheap, Inc. The domain relies on the default Namecheap name servers dns1.namecheaphosting.com and dns2.namecheaphosting.com. The web server returns HTTP status code 200 and presents a TLS certificate issued by ZeroSSL RSA Domain Secure Site CA.

Infrastructure analysis shows a Gridinsoft trust score of 0/100, indicating a lack of confidence in the host. The domain is listed on a single security blocklist, PhishDestroy, and is flagged by 12 of 95 security vendors on VirusTotal, reinforcing its classification as a generic phishing site. The site’s page title matches the domain name, a technique often used to obscure malicious intent.

Evidence points to an active phishing campaign: the domain is newly created, the server is live, and the SSL certificate is valid, which together facilitate credential‑harvesting attempts. No specific brands, login portals, or payload details have been disclosed publicly, so the exact content of the phishing lure remains uncertain. Nevertheless, the combination of recent registration, active hosting, and multiple vendor detections signals a high‑risk threat.

Defenders should immediately block network traffic to 66.29.132.107 and add minion178-1.cc to web filtering and URL reputation lists. Ongoing monitoring of DNS queries for this domain and its authoritative name servers is recommended, as the infrastructure could be repurposed for additional malicious sites. Email security solutions should scan for references to the domain and inspect any credential submissions that may have been captured, enabling rapid mitigation of potential compromise.