ferospin[.]com

PhishDestroy identifies ferospin.com as a credential harvesting phishing domain posing as a login portal, now taken offline.

The domain ferospin.com was flagged by 3 of 95 VirusTotal security vendors for credential harvesting phishing tactics. It resolves to IP 172.67.190.2, uses a Let's Encrypt SSL certificate, and was served via Cloudflare. Creation date and registrar details remain unverified due to the domain’s current offline status. While blocklist counts and trust scores were not publicly available at the time of reporting, the elevated risk level and low VirusTotal detection ratio indicate active malicious intent.

This domain is currently offline, mitigating immediate threats. Users should avoid visiting ferospin.com or engaging with any associated links. Security teams should block the domain at the network level, monitor for reactivation, and scan systems for potential credential exposure. The low VirusTotal detection rate suggests reliance on novel techniques, warranting heightened vigilance.