login[.]securitybot[.]biz

PhishDestroy identifies login.securitybot.biz as an active credential phishing domain currently under investigation for harvesting user login credentials. This domain poses a direct threat to individuals or organizations expecting legitimate authentication portals, as it mimics security-related branding to deceive visitors into disclosing sensitive information. The current status remains active, with no confirmed takedown or mitigation measures in place.

This domain was flagged by 1 of 95 VirusTotal vendors, indicating it has not yet been widely detected by automated security tools. Registered through DYNADOT LLC, login.securitybot.biz resolves to IP 188.114.96.3 and was created on April 22, 2026. Given its recent registration and lack of detections, it represents a high-risk, low-profile threat that may evade initial scrutiny. The domain’s use of a Let’s Encrypt SSL certificate further enhances its perceived legitimacy, increasing the likelihood of successful phishing attempts.

While the immediate risk is classified as under investigation, the absence of VirusTotal detections and recent domain creation suggest this phishing site could escalate quickly. Users are advised to avoid interacting with login.securitybot.biz and report any suspicious activity immediately. Organizations should block this domain at the network level and update security policies to flag similar domains. Continuous monitoring is recommended due to the evolving nature of this threat.