eliaruizwork[.]com

This domain, eliaruizwork.com, is actively engaged in a fake portfolio phishing campaign designed to impersonate a legitimate concept artist and creative professional. Analysis indicates the site mimics a personal portfolio, complete with a fabricated professional identity (Elia Ruiz | Concept Artist, DMP, Creative D.), likely to establish credibility before soliciting sensitive information or distributing malicious payloads. The threat type is classified as brand impersonation with potential credential harvesting or malware distribution objectives, targeting visitors who may believe they are interacting with a genuine creative professional’s work samples or contact page.

Infrastructure analysis reveals multiple high-confidence indicators of compromise. The domain was registered on May 07, 2024, through GoDaddy.com, LLC, and currently resolves to the IP address 188.114.96.3. Detection metrics are significant: 12 out of 95 security vendors on VirusTotal flag the domain as malicious, while three major blocklists—OpenPhish, PhishingArmy, and OISD—have independently listed it for phishing activity. The SSL certificate, issued by Google Trust Services, does not mitigate the risk, as phishing sites frequently leverage valid certificates to appear legitimate.

Users who have visited eliaruizwork.com are advised to take immediate remediation steps. Any credentials, personal information, or files submitted to the site should be considered compromised and invalidated. System scans using updated security tools are recommended to detect potential malware infections. Browser caches and saved passwords should be cleared to prevent persistent access. If financial or authentication details were entered, affected accounts should be secured with new credentials and monitored for unauthorized activity. Organizations should update internal blocklists to include this domain and its associated IP address (188.114.96.3) to prevent further exposure.