temopex[.]com

PhishDestroy has identified temopex.com as an active credential theft domain posing as a generic login portal. This domain, created on April 29, 2026, is currently resolving to IP 172.67.148.64 and is registered through Fewmoretaps OU d/b/a Trustname.com. The infrastructure relies on a Let's Encrypt SSL certificate to appear legitimate, but the domain exhibits red flags consistent with opportunistic phishing campaigns.

This domain was flagged by only 1 out of 95 VirusTotal security vendors, indicating low detection coverage despite clear malicious intent. The domain was registered less than 24 hours prior to analysis, suggesting a rapidly deployed threat actor operation. As of this report, temopex.com is not currently listed on Google Safe Browsing (GSB) blocklists, and no known drainer kit or specific brand impersonation has been confirmed in open-source intelligence. However, the rapid creation, fresh SSL certificate, and low detection rate elevate the risk of successful user compromise.

As of this assessment, temopex.com remains active and poses an elevated risk to unsuspecting users. PhishDestroy recommends immediate network and endpoint blocking of the domain and associated IP. Users should avoid accessing the site and verify any unexpected login prompts through official channels. The combination of recent domain creation, low detection coverage, and absence from blocklists suggests this domain may be part of a broader opportunistic campaign targeting login credentials. Remain vigilant and report any interactions with this domain to your security team.