webmail[.]multisafeprotocol[.]xyz

The domain webmail.multisafeprotocol.xyz is a generic phishing site designed to harvest user credentials via email-based scams. It does not impersonate a specific brand or employ a known drainer kit. As of the latest verification, webmail.multisafeprotocol.xyz has been taken offline, though it previously posed an elevated risk to users who may have interacted with it.

Technical indicators confirm the domain's malicious nature. webmail.multisafeprotocol.xyz was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and Trustwave. It was registered through OwnRegistrar, Inc. on September 12, 2025, and resolved to the IP address 104.21.80.1, hosted by Cloudflare, Inc. in the US. The domain appeared on one security blocklist (PhishDestroy) and lacked an SSL certificate, with the observed page title reading 'Pieni hetki...'. No SSL issuer was recorded, and Gridinsoft assigned it a trust score of 0/100.

Users who may have entered credentials on webmail.multisafeprotocol.xyz should immediately change passwords for any accounts accessed from the site and enable two-factor authentication where available. Monitor financial and email accounts for unauthorized activity. Report the phishing domain to local cybersecurity authorities or platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.