findmy[.]nolocattion-sopport[.]sbs

This domain presents a deceptive 'No Internet' error page designed to harvest user credentials. The site mimics legitimate connectivity alerts, tricking visitors into entering login details or downloading malicious files under the guise of restoring internet access. Analysis indicates this is a targeted credential theft operation rather than a generic phishing attempt, given the specific error page theme and infrastructure choices. Infrastructure analysis reveals multiple indicators of malicious activity. The domain was registered on March 14, 2026 through NameSilo, LLC, an uncommon registrar choice for legitimate connectivity services. Security vendors have flagged the domain, with 6 out of 95 engines on VirusTotal detecting it as malicious. The site resolves to 161.97.140.80, hosted by Contabo GmbH in France, and uses a Let's Encrypt SSL certificate (R13). The domain appears on one security blocklist and is actively blocked by enterprise security systems. Users who visited findmy.nolocattion-sopport.sbs should immediately change any credentials entered on the site, particularly for email, banking, or work accounts. Check devices for unexpected software installations or configuration changes made during the visit. Monitor accounts for unauthorized access attempts in the following weeks. Network administrators should block the domain and IP address (161.97.140.80) at the perimeter. The domain's creation date in 2026 suggests it was registered specifically for malicious purposes, and users should treat any interaction with it as a security incident requiring remediation.