14research[.]online

This domain, 14research.online, operates as a credential harvesting phishing site designed to deceive users into submitting login credentials. The site displays a fraudulent 'Account Suspended' page, a common tactic used to create urgency and trick victims into entering sensitive information such as usernames, passwords, or financial details. Such pages are frequently deployed in phishing campaigns targeting corporate, financial, or personal accounts, where stolen credentials can lead to unauthorized access, identity theft, or financial fraud. Analysis indicates this domain was registered on January 16, 2022, through Instra Corporation Pty Ltd, a registrar often associated with high-risk domains. The site is flagged by 23 out of 95 security vendors on VirusTotal, including detections for phishing and malicious activity. Additionally, it appears on two security blocklists and is blocked by multiple threat intelligence feeds. The domain resolves to the IP address 91.193.42.13, hosted on Amazon Web Services (AS16509), a common infrastructure choice for phishing operations due to its scalability and availability. The SSL certificate is issued by Let's Encrypt, which, while legitimate, is frequently abused by threat actors to lend a false sense of security to malicious sites. Users who visited 14research.online should take immediate action to mitigate potential risks. First, do not enter any credentials or personal information on the site. If credentials were already submitted, change passwords for all affected accounts, prioritizing financial, email, and work-related logins. Enable multi-factor authentication (MFA) wherever possible to add an additional layer of security. Monitor accounts for unusual activity, such as unauthorized transactions or login attempts, and report any suspicious behavior to the relevant service provider. Additionally, scan the device used to access the site for malware, as phishing pages may redirect to or host malicious payloads. Finally, report the domain to local cybersecurity authorities or threat intelligence platforms to aid in broader mitigation efforts.