find-alert-device[.]com

This domain, find-alert-device.com, poses a confirmed credential harvesting threat designed to deceive users into submitting login credentials, financial details, or personal information under false pretenses. The site mimics legitimate device security alerts or account verification prompts, exploiting urgency and fear to manipulate victims. Infrastructure analysis reveals the domain employs social engineering tactics typical of phishing campaigns, including fabricated security warnings and spoofed login portals. Analysis indicates this phishing infrastructure was registered on March 26, 2026, through NameSilo, LLC, and resolves to the IP address 194.163.176.233. The domain is flagged by 16 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100 and a Scamadviser trust rating of 35/100. It appears on one security blocklist and is served via an Apache HTTP Server. The page title 'Access Denied' suggests either a cloaking mechanism to evade detection or a failed deployment attempt, though the underlying infrastructure remains malicious. Users who visited find-alert-device.com should immediately revoke any entered credentials, particularly for banking, email, or corporate accounts. Scan the device used to access the site with updated security tools to detect potential malware or tracking scripts. Enable multi-factor authentication on all critical accounts as an additional safeguard. Monitor financial statements and account activity for unauthorized transactions, and report the incident to relevant fraud prevention authorities. If corporate credentials were exposed, notify the organization’s security team to mitigate potential lateral movement risks.