lg[.]osesyo2[.]sa[.]com

This domain is flagged as a high-risk credential harvesting phishing site. Analysis indicates it is designed to mimic legitimate login portals to capture user credentials, financial details, or other sensitive information. The absence of security controls and active malicious infrastructure support this assessment. Infrastructure analysis reveals the domain lg.osesyo2.sa.com resolves to IP address 178.16.53.103, hosted in the Netherlands under AS202412 (Omegatech LTD). It appears on one security blocklist and is flagged by 9 out of 95 security vendors on VirusTotal. The domain lacks an SSL certificate, increasing exposure to man-in-the-middle interception. Registered through Sav.com, LLC on June 25, 1998, the domain displays a generic 'Site is created successfully!' page, a common placeholder for recently deployed phishing infrastructure. Detection by PhishDestroy and ongoing active status further confirm operational malicious intent. Mitigation requires immediate blocking of the domain and its associated IP (178.16.53.103) at the network perimeter. Security teams should monitor for credential reuse attempts across internal systems and enforce multi-factor authentication for all external-facing portals. End-user training should emphasize identifying unencrypted login pages and verifying domain authenticity before entering credentials. Network logs should be reviewed for connections to 178.16.53.103 or related subdomains to identify compromised accounts.