law-firm[.]site

PhishDestroy identifies the domain law-firm.site as an active credential theft site currently under investigation for mimicking legitimate legal firms. The domain is categorized under the generic phishing threat type, with a current status of active and a risk level marked for under-investigation. This domain is suspected of harvesting user credentials under the guise of a professional law firm platform.

This domain, law-firm.site, was created on April 08, 2026, and is registered through NAMECHEAP INC. It resolves to the IP address 188.114.97.3 and utilizes a Let's Encrypt SSL certificate for legitimacy. As of the latest analysis, the domain has been scanned by 95 VirusTotal vendors with 0 detections, indicating it has not yet been flagged by security solutions. The domain remains unlisted on major blocklists, with a low trust score of 1/100 on Scamadviser and a 50/100 confidence level that it is a potential threat.

The domain law-firm.site presents a credible risk due to its recent registration, use of a trusted SSL certificate, and low detection rate among security vendors. While the specific brand being impersonated has not been confirmed, the domain's name and structure suggest an attempt to deceive users seeking legal services. Given its active status and lack of blocklist presence, this domain poses a moderate-to-high risk to unsuspecting visitors. Users are strongly advised to avoid interacting with this domain and to report any encountered phishing attempts to their security teams or through platforms like PhishDestroy. Organizations should consider blocking this domain and IP address at the network level to prevent potential credential theft or malware delivery. Continuous monitoring and proactive threat intelligence sharing are recommended to mitigate risks associated with emerging phishing domains like law-firm.site.