idpsupport[.]org

Analysis of the domain idpsupport.org indicates it is actively serving as a generic phishing infrastructure with high-risk classification. Registered on May 4, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu, the domain resolves to IP 176.123.0.199, hosted by Alexhost SRL in Moldova. Nameservers ns7.alexhost.com and ns8.alexhost.com further link it to this provider. The domain currently returns an HTTP 302 redirect status, suggesting it may be funneling traffic to another malicious endpoint, though the destination remains unconfirmed. Security vendors PhishDestroy, MetaMask, and SEAL have blocked this domain, and it appears on three security blocklists. AlienVault OTX lists it in one threat intelligence pulse, while Gridinsoft assigns a trust score of 0/100. The SSL certificate is misconfigured, presenting as idpsupport.org.terkepmasolatletoltes.com, a discrepancy that may indicate an attempt to evade detection or impersonate a legitimate service. The page title 'Index of /' suggests an exposed directory listing, a common misconfiguration in hastily deployed phishing sites. No specific brand impersonation is confirmed from the available data, though the domain name implies a support-themed deception. Defenders should treat this domain as active and malicious, blocking resolution at the DNS level and monitoring for connections to 176.123.0.199. Further investigation is required to determine the exact phishing kit or payload in use, as current intelligence does not provide these details.