ceshi[.]secondarys[.]com

PhishDestroy identifies ceshi.secondarys.com as an active domain engaged in generic phishing activities under investigation. The website mimics the branding of Google Trust Services, a globally recognized certificate authority, to deceive visitors into surrendering sensitive information. The current risk level remains classified as under_investigation, though early indicators suggest malicious intent.

This domain was flagged by 8 of 95 VirusTotal vendors at the time of assessment, indicating a potential blind spot in automated detection systems. Registered through GoDaddy.com, LLC, ceshi.secondarys.com resolves to IP address 172.67.172.34 and was created on February 15, 2026, aligning with the behavioral patterns of recently deployed phishing infrastructures. Notably, the domain leverages a Google Trust Services SSL certificate, which may further enhance its credibility in the eyes of unsuspecting visitors. The absence of blocklist entries at this stage does not mitigate its latent threat potential.

As this domain remains active and unblocked, users are strongly advised to avoid interaction and report the URL to relevant cybersecurity authorities. PhishDestroy recommends validating SSL certificates directly with the purported issuer (Google Trust Services) and utilizing browser extensions or domain reputation tools before accessing unknown links. Network administrators should consider implementing DNS-based blocking for 172.67.172.34 and updating firewall rules to filter traffic to ceshi.secondarys.com. Proactive monitoring of emerging SSL certificates linked to this domain is critical, as attackers often rotate infrastructure to evade detection.