evelpartner[.]com

PhishDestroy identifies active credential harvesting operations conducted via the domain evelpartner.com. This domain is currently engaged in a generic phishing campaign, with an elevated risk level and confirmed malicious activity. The threat involves the impersonation of a legitimate partner platform to deceive users into disclosing sensitive credentials or personal information.

This domain was flagged by 1 of 95 VirusTotal vendors, indicating limited but concerning detection coverage. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 89.124.117.66. The domain was created on April 27, 2026, and currently holds an SSL certificate issued by Let's Encrypt, which may contribute to a false sense of legitimacy. The low VirusTotal detection rate suggests this domain may be newly deployed or employing evasion tactics to avoid immediate identification.

The status of this campaign remains active, and users are strongly advised to avoid interacting with evelpartner.com or any associated links. Organizations should block the domain at the network perimeter and update threat intelligence feeds to include this indicator. End users should report any suspicious communications referencing this domain to their security teams. Immediate investigation is recommended for any accounts or systems that may have been exposed to this threat.