newlifers[.]org

The domain newlifers.org was registered on 25 September 2023 through GoDaddy.com, LLC and remains active as of the analysis date. It is hosted under the IP address 97.74.184.238 and uses the default GoDaddy nameservers ns75.domaincontrol.com and ns76.domaincontrol.com. The site serves an SSL certificate issued by Let’s Encrypt (YR2), indicating encrypted HTTPS traffic. VirusTotal reports that two of ninety‑one security vendors have flagged the domain, suggesting limited but existing detection of malicious activity. Additionally, AlienVault OTX lists the domain in three separate threat‑intel pulses, reinforcing its association with malicious campaigns. The available data points to a generic phishing operation, though the specific phishing payload, target audience, or compromised credential type have not been publicly disclosed. Uncertainty remains regarding the full scope of the infrastructure, such as any back‑end command‑and‑control servers or additional IPs used in concert with the primary host. Defenders should block DNS resolution to newlifers.org, monitor outbound connections to 97.74.184.238, and enforce email filtering rules that detect URLs pointing to this domain. Continuous re‑assessment of VirusTotal and OTX updates is advised to capture any escalation in detection counts or new intelligence references.