mirawex[.]com

Analysis of mirawex.com indicates that the domain was registered on July 13, 2026 through Fewmoretaps OU doing business as Trustname.com. The authoritative nameservers are randall.ns.cloudflare.com and serenity.ns.cloudflare.com, directing traffic to the Cloudflare network. DNS resolution points to the IPv4 address 188.114.97.3, which is owned by Cloudflare and commonly used for content delivery and proxy services. The domain has been scanned by 95 VirusTotal vendors; none of the vendors returned a detection at the time of scanning.

The site is currently blocked by the PhishDestroy feed and appears on one additional security blocklist, confirming that external threat‑intelligence sources have identified it as malicious. No public Safe Browsing, Open Threat Exchange (OTX), or similar reputation feeds are referenced in the available intelligence, and no SSL certificate details, HTTP status codes, or page title information have been disclosed. Consequently, the presence or absence of transport‑layer encryption and the nature of the landing page remain unknown.

Defenders should treat the domain as hostile until further evidence is obtained. Recommended actions include adding mirawex.com and its resolving IP (188.114.97.3) to DNS‑based block lists, monitoring outbound connections for attempts to reach the address, and employing URL‑filtering solutions that reference the PhishDestroy block. Continuous re‑scanning with multiple sandbox and AV engines is advised to capture any evolving payloads, and analysts should watch for any future Safe Browsing or OTX entries that could provide additional context about the campaign’s objectives.