alsahlahotel[.]com

The domain alsahlahotel.com has been identified as a generic phishing threat. It appears to be masquerading as a legitimate site for Al Salah Land Hotel in Najaf. No specific brand drain kits were noted in the investigation, indicating potential standalone phishing attempts.

Technical indicators reveal a VirusTotal score of 4/95, meaning that four out of ninety-five security vendors flagged the domain as suspicious. The domain was registered through Network Solutions, LLC, and it resolves to the IP address 144.217.146.128. The domain was created on July 17, 2023, and is currently active. There are four known blocklist entries for this domain, which adds to the urgency of addressing this threat.

Currently, alsahlahotel.com remains active and poses a high risk as a phishing threat. Response actions should include blocking access to this domain and monitoring for any related phishing attempts. The presence of a Let's Encrypt SSL certificate does not mitigate the risk, as it may mislead users into believing that the site is trustworthy. Due diligence is recommended to prevent potential exploitation.