almethali[.]co

The domain almethali.co has been identified as a generic_phishing threat and is currently offline. This domain does not impersonate a specific brand, but its use as a phishing site poses an elevated risk to users who may encounter it. The domain's status and threat level indicate a need for vigilance among security professionals and end-users alike.

Analysis indicates that almethali.co has been flagged by 15 of 95 VirusTotal vendors, suggesting a moderate level of recognition among security services. The domain was registered through NETIM SAS and is hosted on an IP address 94.136.170.26, which is located in the United Kingdom (GB) and is part of the AS42831 network operated by UK Dedicated Servers Limited. The domain was created on October 17, 2021, and currently appears on one security blocklist. The SSL certificate for the domain is issued by Let's Encrypt, a widely used certificate authority, which may lend a false sense of security to unsuspecting users. The trust scores and blocklist presence further underscore the domain's malicious intent.

The current status of almethali.co is that it has been taken offline, reducing the immediate risk of exposure. However, security professionals are advised to monitor this domain for any signs of reactivation or related malicious activities. End-users should be cautious of any communications or links referencing almethali.co and should verify the legitimacy of any websites or services that appear similar. Organizations are recommended to update their threat detection and prevention systems to include this domain in their blocklists and to educate employees about the risks associated with phishing domains.