saahabet1472[.]com

The domain saahabet1472.com was registered on April 28, 2026 through the entity Fewmoretaps OU d/b/a Trustname.com. It resolves to the Cloudflare‑owned address 188.114.96.3, a server located in Canada (CA). The site returns HTTP status 200 and presents the title “ECB | Acesso Restrito ao Painel”, indicating a likely credential‑harvesting page. The hosting infrastructure relies on Cloudflare’s DNS and HTTP/3 stack. Authoritative nameservers are jihoon.ns.cloudflare.com and pam.ns.cloudflare.com. The transport layer is protected by a Let's Encrypt certificate issued under the “E7” profile, and server‑side code appears to be PHP. Gridinsoft assigns a trust score of 0 out of 100, confirming a malicious reputation. Threat intelligence sources place the domain on a single security blocklist, specifically PhishDestroy, and it appears in one AlienVault OTX pulse. VirusTotal analysis shows that 7 of 95 scanners flag the domain as malicious, reinforcing the high‑risk classification. The overall risk level is marked as high and the status remains active. Defenders should immediately block saahabet1472.com at the network perimeter and include its IP address 188.114.96.3 in deny lists. Continuous monitoring of DNS queries for this domain is advised, as well as scrutiny of outbound traffic that may attempt to reach the site. Incident response teams should assume credential theft attempts and investigate any related login anomalies.