saudi-transactions-tracker[.]com

The domain saudi-transactions-tracker.com is actively engaged in a phishing campaign that specifically targets users with fake login pages. The intent is to deceive users into submitting their credentials, potentially leading to account compromise or unauthorized access to sensitive information. This domain impersonates legitimate financial or transactional services under the guise of a 'tracker,' aiming to exploit user trust through social engineering.

Technical analysis reveals that saudi-transactions-tracker.com was created recently on June 17, 2025, and resolves to the IP address 178.63.224.102. It uses a Let's Encrypt SSL certificate, which can lend the appearance of legitimacy to unsuspecting users. Despite these signals, the domain is registered through Realtime Register B.V., a known registrar that has been associated with various abusive domains. VirusTotal currently reports 0 detections out of 95 antivirus engines, suggesting it is not yet widely flagged by automated tools. The domain is under investigation and remains active, indicating ongoing risk. At this time, no public blocklist counts have been reported, but this may change as investigations progress.

Users who have visited saudi-transactions-tracker.com should exercise caution and assume potential compromise of credentials if they entered any login information. It is advisable to immediately change passwords on any potentially affected accounts and enable multifactor authentication where possible. Users should also monitor their accounts for unauthorized activity and report suspicious incidents to their service providers. Verification of this domain's status and further details can be done via PhishDestroy to stay informed on the evolving threat. Avoid interacting with unsolicited links or emails referencing this domain to mitigate risk.