ruteforing[.]speed[.]bioignites[.]org

Analysis of ruteforing.speed.bioignites.org shows a newly created domain (registered on June 03, 2024) that is actively used for phishing. The domain resolves to the IPv4 address 91.92.240.183 and is hosted on Amazon DNS infrastructure, as indicated by the four AWS name servers (ns-1081.awsdns-07.org, ns-1637.awsdns-12.co.uk, ns-544.awsdns-04.net, ns-59.awsdns-). Registration was performed through Amazon Registrar, Inc., a common provider for compromised or disposable domains. Google Safe Browsing has flagged the site for social engineering, confirming that the URL is associated with credential‑stealing activity. VirusTotal scans report that 11 out of 95 security vendors have marked the domain as malicious, reinforcing the suspicion raised by other intelligence sources. The domain appears on one external blocklist and is listed as blocked by PhishDestroy, indicating that at least one threat‑intelligence feed is already taking mitigation steps. While the available data confirm the phishing nature of the site, no public page title, SSL certificate details, or HTTP response codes have been disclosed, leaving the exact content and lure technique unverified. Defenders should immediately add 91.92.240.183 to network deny lists, enforce DNS sinkholing for ruteforing.speed.bioignites.org, and monitor outbound connections to the AWS name servers for related activity. Ongoing vigilance is advised, as the domain remains active and could be leveraged in broader credential‑harvesting campaigns.