secure-assets-profile[.]com

This domain is currently classified as a high‑risk credential‑phishing site. The HTTP response returns status code 200 and the page title is reported as "Website not found", indicating that a web server is active but the expected content is not visible. No TLS certificate is presented, leaving the connection unencrypted. The domain was registered on 20 October 2025 through Hosting Concepts B.V. d/b/a Registrar.eu and uses the openprovider name servers ns1.openprovider.nl, ns2.openprovider.be and ns3.openprovider.eu. DNS resolution points to the IPv4 address 35.204.150.5, which is hosted in the Netherlands and belongs to AS396982 owned by Google LLC. The IP address is already listed on one security blocklist and the domain appears on the PhishDestroy blocklist.

Threat intelligence from AlienVault OTX includes a single pulse referencing this domain. VirusTotal analysis shows that 15 of 95 scanned security vendors flagged the domain as malicious, reinforcing the phishing assessment. Gridinsoft assigns a trust score of 0 out of 100, and the overall risk rating is marked as high with an active status. Uncertainty remains regarding the exact content served to victims, as the page title alone provides limited insight and no SSL certificate prevents verification of any credential‑capture forms. The lack of additional public detections beyond the single OTX pulse and the modest VirusTotal count suggest limited distribution, but the active hosting and blocklist presence indicate an operational campaign.

Defenders should immediately block secure-assets-profile.com at perimeter firewalls, DNS resolvers, and proxy filters. Adding the IP 35.204.150.5 to deny‑list rules is advisable, and continuous monitoring of DNS queries for this domain is recommended. If TLS inspection is deployed, the absence of a certificate will trigger alerts. Security teams should also enrich internal feeds with the associated OTX pulse and the VirusTotal detection summary to improve detection accuracy.