s-10longs[.]ac10ao[.]dr-roudbaraki[.]ir

PhishDestroy has identified s-10longs.ac10ao.dr-roudbaraki.ir as a generic phishing site designed to steal email login credentials. The page masquerades as an IONOS by 1&1 webmail portal, displaying the title "Webmail » Acceso al correo electrónico | IONOS by 1&1" to trick users into entering their email address and password. This brand impersonation targets individuals who use IONOS email services, aiming to harvest sensitive account information for unauthorized access or further fraud.

Technical analysis reveals several red flags. VirusTotal reports that 10 out of 95 security vendors flag this domain as malicious, indicating widespread recognition of the threat. The domain was created on April 15, 2026, a very recent date that aligns with typical phishing campaigns using fresh domains to evade reputation-based filters. It is registered through an undisclosed registrar and uses a Let's Encrypt SSL certificate (R13), which provides encryption but does not verify legitimacy. The domain resolves to IP address 65.21.26.20 and appears on at least one security blocklist. The site is currently offline, but the infrastructure could be reused for future attacks.

If a user has visited this page and entered credentials, they should immediately change their IONOS email password and enable two-factor authentication. It is also advisable to scan devices for malware, monitor accounts for suspicious activity, and report the incident to IONOS support. PhishDestroy recommends always verifying the URL of login pages by typing the official domain directly into the browser rather than clicking links in emails or messages. For ongoing protection, users can submit suspected phishing URLs to PhishDestroy for analysis and blocklisting.