dolomtie[.]com

PhishDestroy identifies dolomtie.com as a currently active fake login page scam designed to harvest user credentials through deceptive domain spoofing. This domain has been confirmed as a phishing host with no detections on VirusTotal as of the latest scan, indicating it remains under the radar of most security vendors. The page title 'www.www.dolomtie.com' suggests an attempt to mimic legitimate subdomains or obscure its true nature through excessive subdomain layers, a common tactic in phishing campaigns. This domain was flagged by 2 of 95 VirusTotal vendors, indicating it has not yet been widely recognized as malicious. The SSL certificate is issued by Google Trust Services, which may lend an air of legitimacy to unsuspecting users. Further technical analysis reveals that dolomtie.com was registered recently, with creation dates pointing to suspicious timelines often associated with disposable phishing domains. The domain resolves to an IP address that has been associated with multiple blocklist entries, though the exact count remains under investigation. Trust scores for this domain and its associated infrastructure are currently low, reflecting its high-risk status and lack of established reputation. Given the active status of this fake login page scam and the absence of detections, organizations and users are strongly advised to block access to dolomtie.com at the network and endpoint levels. Implement DNS filtering to prevent resolution of this domain, and ensure employees are educated about verifying URLs before entering credentials. Additionally, monitor network traffic for any unexpected outbound connections to this domain or its subdomains, as such activity may indicate compromised systems. Security teams should also consider submitting this domain to threat intelligence platforms to aid in its detection and blocklisting across broader security ecosystems.