ecos[.]login-app-secure[.]com

The domain ecos.login-app-secure.com impersonated a customer portal in a phishing attempt targeting users. With a VirusTotal detection score of 16 out of 95, this domain presented a serious risk for credential theft. The page title suggested urgent updates, likely aimed at luring victims into providing sensitive information.

Registered only three days prior through eNom, LLC in the UK, this domain quickly gained notoriety with multiple blocklist entries. The IP address 194.36.191.196 indicates shared hosting, a common tactic among cybercriminals to manage multiple scams from a single server. The rapid domain age also suggests a hastily established operation targeting individuals seeking to update their financial details.

As of now, the domain has been taken down, and PhishDestroy reported the phishing activity to relevant authorities while monitoring the situation. The proactive measures taken have helped mitigate potential harm from this fraudulent site.