viser-credit[.]com[.]speedafricalink[.]com

This domain is a confirmed phishing site targeting users of Viser Credit Union. Analysis indicates it is designed to mimic the legitimate credit union’s website, likely to harvest login credentials, personal information, or financial details from unsuspecting visitors. The site uses a deceptive subdomain structure (viser-credit.com.speedafricalink.com) to appear legitimate, a common tactic in credential theft campaigns. Users who enter sensitive information on this site risk account takeover, identity theft, or unauthorized financial transactions. Infrastructure analysis reveals multiple red flags confirming its malicious nature. The domain was registered on August 25, 2025, through OwnRegistrar, Inc., an unusually recent creation date for a purported financial institution. Only 5 out of 95 security vendors on VirusTotal currently flag the domain, suggesting it may still be evading broader detection. The site resolves to IP address 163.61.188.7 and uses a Let’s Encrypt SSL certificate, which provides encryption but does not validate the site’s legitimacy. Additionally, it appears on at least one security blocklist, and its Gridinsoft trust score is 0/100, further indicating high risk. If you visited this domain or entered any information, immediate action is required. First, cease all interaction with the site and do not provide any additional details. If you submitted login credentials, change your passwords for the legitimate Viser Credit Union site and any other accounts where the same credentials were reused. Enable multi-factor authentication (MFA) on all financial and sensitive accounts. Monitor your credit union statements and credit reports for unauthorized activity, and consider placing a fraud alert with credit bureaus. Report the domain to your local cybersecurity authorities or financial fraud reporting centers to aid in takedown efforts.