sui[.]al-eltzam[.]com

PhishDestroy identifies sui.al-eltzam.com as part of an active credential theft campaign targeting unsuspecting users. This domain mimics legitimate services to harvest login credentials and sensitive personal information, posing an elevated risk to visitors. The domain was registered through Name.com, Inc. on August 18, 2019, and remains active with an SSL certificate issued by Let's Encrypt. Despite its age, it has only been flagged by 2 out of 95 VirusTotal security vendors, indicating a low detection rate among automated scanners. This domain resolves to IP address 62.72.42.202 and leverages a legitimate-appearing structure to deceive users into entering their credentials. The low VirusTotal detection rate (2/95) suggests that traditional security tools may not yet recognize this threat, increasing the risk of successful exploitation. The domain's age does not correlate with safety, as threat actors frequently repurpose older domains to evade blacklists while maintaining operational functionality for phishing campaigns. If you have visited sui.al-eltzam.com, assume your credentials may have been compromised. Immediately change passwords for any accounts where you may have reused credentials, enable multi-factor authentication where available, and scan your device for malware. Report the domain to your organization's security team or to platforms like Google Safe Browsing if you are a system administrator. Avoid interacting with this domain further, and consider blocking it at the network level to prevent others from falling victim.