xplmkt[.]saudiwba[.]me

PhishDestroy identifies the domain xplmkt.saudiwba.me as an active phishing page masquerading as a Business Help Center. This threat is currently under investigation but remains accessible and operational as of the latest assessment. Users are advised to exercise extreme caution when encountering this domain, which explicitly mimics a legitimate business support portal. This domain was flagged by 15 of 95 VirusTotal vendors, indicating a low detection rate despite its malicious intent. It resolves to IP address 103.167.93.127, is registered through GMO Internet, Inc., and was created on March 23, 2026. The domain employs a self-signed SSL certificate labeled as 'localhost,' further obscuring its true nature and lowering trust scores among security platforms. Additionally, no known blocklist entries currently flag this domain, increasing the risk of successful user deception. As of today, xplmkt.saudiwba.me remains active and poses a credible threat to users seeking business assistance online. To mitigate risk, PhishDestroy recommends immediate domain blocking at the network level and user awareness campaigns highlighting the use of non-standard SSL certificates and misspelled or obscure subdomains. Organizations are urged to inspect DNS logs for resolution attempts to 103.167.93.127 and to update threat intelligence feeds accordingly. End users should report any interactions with this domain to their IT security teams or through established phishing reporting channels. Exercise caution and verify the legitimacy of business support websites before entering credentials or sensitive information.