satumenit[.]m4xwenlagi[.]org

PhishDestroy identifies satumenit.m4xwenlagi.org as a generic phishing domain currently active and under investigation as a credential harvesting scam. The domain employs HTTPS via a Let’s Encrypt certificate to appear legitimate and is designed to trick users into surrendering sensitive information under false pretenses.

This domain was flagged by 1 of 95 VirusTotal vendors, registered through Internet Domain Service BS Corp, resolves to IP 188.114.97.3, and was created on March 25, 2026. It remains unlisted on major blocklists, with current trust and reputation scores at or near zero across threat intelligence platforms. The use of Let’s Encrypt and the recent registration window amplify the risk of undetected malicious activity.

Users are advised to block satumenit.m4xwenlagi.org at the network and endpoint levels and to avoid accessing the domain or any linked pages. Security teams should inspect DNS resolution and SSL certificate logs for related activity. Report any observed interactions to maintain the integrity of threat intelligence feeds and prevent further compromise.