towercityelevators[.]com

Analysis of towercityelevators.com indicates a phishing domain targeting Arabic-speaking users in the elevator and escalator service sector. The domain was registered on March 6, 2026, through HOSTINGER operations, UAB, and resolves to IP 82.25.96.130, hosted on AS47583 (Hostinger International Limited) in Germany. No SSL certificate is present, increasing susceptibility to interception and reducing user trust. The page title, 'تاور سيتى للمصاعد والسلالم المتحركة – Tower City – تاور سيتى للمصاعد والسلالم المتحركة – Tower City,' suggests an attempt to impersonate a legitimate elevator service provider, though the exact brand or entity being mimicked remains unconfirmed due to lack of further content analysis.

The domain appears on one security blocklist (PhishDestroy) and is flagged by one of 95 security vendors on VirusTotal, indicating low but non-zero detection coverage. Nameservers ns1.dns-parking.com and ns2.dns-parking.com are consistent with low-cost or automated hosting setups often exploited for phishing campaigns. The site was taken offline prior to this assessment, limiting further forensic analysis.

Defenders should treat this domain as a confirmed phishing threat, particularly for Arabic-language users in the elevator services industry. Network-level blocking is recommended, and organizations in this sector should monitor for similar domain registrations or DNS resolutions linked to this IP or registrar. No evidence of credential harvesting infrastructure or associated malware was identified in the available data.