dashboard-pharos[.]xyz

The domain dashboard-pharos.xyz was identified as a potential risk for credential theft. While no specific brand impersonation or drainer kit was detected, the domain's presence on multiple security blocklists and low trust score indicate a high risk of being involved in malicious activities. The domain does not appear to be associated with a recognized brand, and no specific phishing kit was identified, but the threat type is consistent with credential theft attempts.

Infrastructure analysis reveals that dashboard-pharos.xyz has a VirusTotal detection score of 0/95, suggesting a lack of immediate recognition by automated systems, but it is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar that has been linked to other suspicious domains. The domain resolves to the IP address 188.114.96.3 and was created on May 26, 2026. It appears on 3 security blocklists and has a Gridinsoft trust score of 0/100, further indicating its potential malicious nature. The site uses technologies such as HSTS, Cloudflare, and HTTP/3, which can mask the true origin and nature of the domain.

Currently, the domain is taken offline, reducing the immediate risk to users. However, the presence of the domain on multiple blocklists and the low trust score suggest that it may have been previously active in credential theft campaigns. Users should remain vigilant and avoid interacting with the domain if it becomes active again. Security teams should monitor the domain and associated IP address for any future activity and consider adding it to their internal blocklists to prevent potential threats.