free-5547865[.]webadorsite[.]com

This domain is flagged as an elevated-risk credential harvesting phishing site designed to steal user authentication credentials. Analysis indicates it operates under the generic_phishing threat type, with infrastructure optimized for short-term deployment and rapid takedown evasion. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu, and resolves to IP 34.90.225.198 (AS396982, Google LLC, Netherlands). The SSL certificate is issued by Let's Encrypt (R12), a common choice for phishing sites due to its low validation requirements. VirusTotal detection rates show 21 of 95 security vendors flagging the domain, while it appears on two security blocklists: PhishDestroy and PhishingDB. The page title 'sdcvzsxvz' suggests deliberate obfuscation to evade automated detection systems. Mitigation requires immediate blocking of the domain and its resolving IP (34.90.225.198) at network perimeters. Organizations should monitor for related subdomains under webadorsite.com, as the registrar (Registrar.eu) and hosting provider (Google LLC) are frequently abused for phishing campaigns. End-user training should emphasize identifying obfuscated page elements, such as nonsensical titles, and verifying SSL certificate issuers before entering credentials. Security teams are advised to correlate this domain with other Let's Encrypt R12 certificates issued around February 2026 for proactive threat hunting.