dosiakindustrial[.]com

PhishDestroy identifies dosiakindustrial.com as an active credential theft domain posing as a legitimate industrial supplier. This site mimics trusted B2B vendors to harvest corporate login credentials, exposing businesses to account takeovers and financial fraud. The domain leverages a recently registered identity (January 26, 2025) and legitimate hosting infrastructure (HOSTINGER UAB, IP 44.211.14.38) to evade early detection, making it particularly dangerous for procurement teams relying on email-based supplier communications. This domain was flagged through sandbox analysis, showing 0 detections on VirusTotal at the time of investigation. It operates under a Let's Encrypt SSL certificate and uses infrastructure associated with HOSTINGER operations. The domain's recent creation (January 26, 2025) and low detection rate suggest an ongoing campaign targeting unsuspecting users. No current blocklist entries are recorded, but the combination of fresh registration, legitimate hosting, and lack of flagging indicates active evasion tactics. Mitigation requires immediate blocking at DNS and network levels. Organizations should update firewall rules to deny traffic to dosiakindustrial.com and its resolved IP (44.211.14.38). Security teams must scan email and endpoint logs for connections to this domain, focusing on credential submission forms. Users should verify supplier communications through out-of-band channels and report any login attempts via this domain to security teams. Continuous monitoring of newly registered domains resembling industrial suppliers is strongly recommended to prevent credential harvesting campaigns.