orbitalstress[.]su

PhishDestroy identifies orbitalstress.su as a high-risk fake login scam hosting fraudulent credential-harvesting pages. This domain mimics legitimate login portals to trick users into surrendering credentials, often leading to account takeovers or financial fraud. The site leverages social engineering tactics, including deceptive branding or urgent language, to coerce victims into entering sensitive information. Once harvested, stolen credentials may be sold on dark web markets or used in follow-on attacks targeting personal, financial, or corporate accounts. This domain was flagged by ScamSniffer and detected by 4 out of 95 VirusTotal security vendors. It was registered through RUCENTER-SU on May 04, 2024, and currently appears on 1 active blocklist. Despite using a Google Trust Services SSL certificate, the domain resolves to IP 188.114.96.3, a known malicious hosting provider. The low detection rate among vendors highlights the sophistication of the threat actor in evading initial scrutiny. Users who visited orbitalstress.su should immediately check for unauthorized transactions or logins on connected accounts. Do not enter any credentials or personal information on this site. If credentials were submitted, change passwords immediately and enable multi-factor authentication. Report the domain to your security team or local authorities to help disrupt ongoing campaigns. Avoid accessing this domain entirely, as it poses an active risk to your digital safety.