# endwellprofits.com — MALICIOUS

> endwellprofits.com was identified as a medium-risk phishing site. Users should avoid interaction; domain is now offline.

## Summary
PhishDestroy identifies endwellprofits.com as a medium-risk generic phishing domain targeting unsuspecting users. The domain was associated with attempts to harvest credentials or personal data through deceptive means. Due to its flagged status, interaction with this domain posed security risks including potential identity theft and unauthorized access.

The domain was registered on February 21, 2026, but is currently classified as a dead domain with minimal active infrastructure. It appeared on one security blocklist and was flagged by nine security vendors on VirusTotal, indicating moderate consensus on its malicious intent. The limited footprint and registrations suggest an ephemeral campaign designed to evade long-term detection.

Currently, endwellprofits.com is offline and no longer active, reducing immediate risk. Users are advised to remain vigilant against similar phishing attempts and avoid clicking on suspicious links. Organizations should continue monitoring blocklists and maintain updated endpoint protections to defend against evolving phishing threats.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: endwellprofits.com CRYPTO Kaivos Maailmalle

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 198.12.66.123
- IP Country: US
- IP City: Buffalo
- IP Org: AS36352 HostPapa
- SSL Issuer: R10

## Detection Status
- VirusTotal: 9 vendors flagged
  Vendors: ["alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "ESET", "Fortinet", "G-Data", "Lionic", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01989c86-1ae9-77bb-8e8f-457412071c9d.png
- PhishDestroy: https://phishdestroy.io/domain/endwellprofits.com/
- LLM endpoint: https://phishdestroy.io/domain/endwellprofits.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/endwellprofits.com/
Last updated: 2026-03-17