supportmapsarg[.]info

This domain, supportmapsarg.info, is flagged as an elevated-risk credential theft phishing operation. Analysis indicates the site impersonates network error pages, specifically displaying a 'No Internet' title, to deceive users into entering sensitive login credentials. The infrastructure is designed to mimic legitimate connectivity issues, increasing the likelihood of successful social engineering attacks against unsuspecting victims. Infrastructure analysis reveals the domain was registered through Sav.com, LLC on November 21, 2025, and resolves to the IP address 161.97.140.80. Detection metrics show 17 out of 95 security vendors on VirusTotal have flagged the domain as malicious, while it appears on one security blocklist. The Gridinsoft trust score for this domain is 0 out of 100, further corroborating its malicious nature. Technologies detected on the site include Apache HTTP Server and references to Twitter, which may be leveraged to enhance the appearance of legitimacy or facilitate data exfiltration. To mitigate risks associated with this credential theft campaign, organizations should immediately block the domain and its resolving IP address (161.97.140.80) at the network perimeter. Endpoint protection solutions should be updated to detect and prevent access to the domain, while security teams should monitor for indicators of compromise, such as unexpected authentication attempts or anomalous login activity. User awareness training should emphasize the risks of interacting with unsolicited error pages, particularly those prompting for credentials. Network administrators are advised to review logs for connections to the domain or IP address and investigate any potential breaches resulting from this phishing attempt.