id-r35dx[.]com

PhishDestroy identifies id-r35dx.com as a high-risk fake giveaway phishing domain actively stealing login credentials. This fraudulent site impersonates legitimate promotions to trick users into submitting personal information under the guise of winning prizes or claiming exclusive offers. The domain was created on April 28, 2026, and is already blocked by major threat intelligence feeds like OpenPhish and PhishingArmy, which flag such domains within hours of detection. This domain was flagged by 24 out of 95 security vendors on VirusTotal and appears on two independent blocklists, confirming its malicious status. It resolves to IP address 185.99.98.8 and was registered through Dynadot Inc, a common registrar for fraudulent websites. Google’s Safe Browsing service has also classified it as SOCIAL_ENGINEERING, a specific category for sites using manipulative tactics to deceive users. Despite having a Let’s Encrypt SSL certificate, which may appear legitimate at first glance, this site is engineered to harvest sensitive data such as usernames, passwords, and financial details from unsuspecting victims. If you accidentally visited id-r35dx.com, avoid entering any personal information or clicking on any links. Immediately close the browser tab, clear your cookies and cached data for this site, and run a full antivirus scan on your device. Change passwords for any accounts you may have accessed after visiting, especially if you reused credentials elsewhere. Report the domain to your email provider and local cybercrime units if possible. For future protection, use browser extensions that block known phishing domains or enable warnings for suspicious sites.