saudi-services-office[.]com

PhishDestroy flags saudi-services-office.com as an active credential theft phishing domain designed to steal account usernames and passwords. This site mimics legitimate Saudi service pages to trick visitors into entering login credentials or payment details, which are then harvested by attackers for fraud or resale on dark web markets. The domain was registered only days ago and already shows signs of malicious infrastructure, indicating a rapidly deployed trap rather than an established operation. Anyone who visited should treat any credentials entered as compromised and rotate passwords immediately. PhishDestroy knows this because saudi-services-office.com currently resolves to IP 178.63.224.102, has a Let’s Encrypt SSL certificate, and was created on October 17, 2024. The domain is registered through Realtime Register B.V., a Netherlands-based registrar often used by low-cost, high-volume domain operators. At the time of analysis, VirusTotal returned 0 detections out of 95 engines, which is typical for newly launched phishing pages that have not yet been widely reported or analyzed. The combination of fresh registration, low detection count, and SSL certificate suggests attackers prioritized speed and stealth over long-term reputation. If you entered any login, financial, or personal information on saudi-services-office.com, assume it has been compromised. Immediately change passwords on that site and any other accounts using the same credentials. Enable multi-factor authentication wherever possible, especially on email and banking accounts. Report the domain to your antivirus vendor or to PhishDestroy to help block future visitors. Do not click any links from this site or download files. Clear browser cache and cookies after visiting, and consider running a full malware scan to remove any tracking scripts. Stay vigilant: newly created domains with low detection scores often appear harmless until they accumulate enough reports to trigger takedowns.