id-4652666[.]com

The domain id-4652666.com has been assessed at an elevated risk level for credential theft. Analysis indicates that this domain was likely used to host phishing pages designed to steal user credentials, posing a significant threat to individuals and organizations.

This domain is flagged by 15 out of 95 security vendors on VirusTotal, suggesting a moderate consensus on its malicious nature. Registered through Hello Internet Corp, the domain was created on June 19, 2025, which is a relatively recent date and often indicative of a newly established threat. The domain appears on two security blocklists, PhishDestroy and OISD, further corroborating its involvement in malicious activities. AlienVault OTX lists the domain in 6 threat intelligence pulses, highlighting its recognition in the cybersecurity community. Despite these red flags, the domain is currently offline, which may be a result of takedown efforts or a temporary suspension.

To mitigate the risks associated with credential theft, it is recommended to educate users about phishing tactics and encourage them to verify the legitimacy of websites and links before entering any sensitive information. Implementing multi-factor authentication (MFA) for all critical accounts can significantly reduce the likelihood of unauthorized access. Additionally, regular monitoring of network traffic and endpoint devices for signs of phishing attempts should be conducted to detect and respond to any potential threats promptly.