support144[.]agency-digital-engine[.]com

This domain, support144.agency-digital-engine.com, is identified as an active credential phishing site targeting user authentication data. Analysis of the page title, 'Help us confirm it's you,' suggests an attempt to mimic legitimate identity verification processes, a common tactic in credential harvesting schemes. No direct association with a known brand or drainer kit has been confirmed, though the infrastructure aligns with generic phishing campaigns designed to capture login credentials, session tokens, or personal information. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 20 out of 95 security vendors on VirusTotal, indicating broad detection across multiple threat intelligence platforms. It was registered through Gransy, s.r.o. on May 8, 2026, an unusual future date that may indicate domain spoofing or registry manipulation. The domain resolves to IP address 188.114.96.3, hosted on AS13335 (Cloudflare, Inc.), a provider frequently leveraged to obfuscate malicious infrastructure. The SSL certificate is issued by Let's Encrypt (serial number E8), providing a veneer of legitimacy while failing to mitigate the underlying threat. The domain appears on one security blocklist and is currently blocked by PhishDestroy, though no Google Safe Browsing (GSB) status is recorded at this time. The domain remains active as of the latest assessment, posing a continued risk to users who may encounter it through phishing emails, malicious advertisements, or compromised redirects. Response actions should include immediate blacklisting in enterprise security gateways, endpoint protection updates, and user education to recognize phishing indicators such as mismatched domain names, urgent verification requests, and unusual creation dates. Despite Cloudflare's mitigation capabilities, the domain's persistence and detection rate underscore a high residual risk, particularly for organizations or individuals targeted by credential-based attacks. Proactive monitoring of related infrastructure, including subdomains or IP neighbors, is recommended to identify and neutralize associated threats.