sp5usder[.]com

The domain sp5usder.com has been identified as a generic phishing threat, currently taken offline. The page title, "Администрирование FreePBX," suggests it impersonated the FreePBX administration interface, likely to harvest credentials or sensitive data from system administrators. This type of phishing attack targets users managing VoIP systems, posing as a legitimate login portal to steal authentication details.

According to security intelligence, sp5usder.com was flagged by 1 of 95 VirusTotal vendors, indicating limited but confirmed malicious detection. The domain was created on April 28, 2026, and registered through Fewmoretaps OU d/b/a Trustname.com. It resolves to IP address 185.185.49.152 and uses SSL certificate NLDW3-6-30-37. AlienVault OTX recorded the domain in one threat intelligence pulse, and it appears on a single security blocklist. These technical indicators, combined with the phishing-oriented page title, confirm the domain's malicious intent.

As the domain is now offline, the immediate risk is mitigated, but users who may have interacted with it should change passwords and enable multi-factor authentication on affected accounts. PhishDestroy recommends verifying any suspicious links through its platform before engaging. Always access FreePBX or similar services directly via official URLs, and avoid clicking unsolicited links in emails or messages. Stay vigilant against social engineering tactics that mimic trusted administrative interfaces.