secure-esl-org[.]lat

The domain secure-esl-org.lat, created on May 23, 2026 and registered through Dynadot LLC, is currently classified as a high‑risk credential phishing campaign and remains active. Infrastructure analysis shows the domain resolves to the IPv4 address 45.61.49.139 and is served by the authoritative nameservers ns1.dyna-ns.net and ns2.dyna-ns.net. Google Safe Browsing flags the domain for social engineering, and it appears on a single security blocklist.

Independent scanning on VirusTotal reports that 22 of 91 security vendors have flagged the domain, indicating a notable detection rate across multiple analysis engines. The domain is also listed by the PhishDestroy blocklist, confirming its recognition by dedicated phishing mitigation services. While the available intelligence provides concrete evidence of malicious intent, several operational details remain unverified: the SSL certificate status, HTTP response codes, website title, and any associated page content have not been publicly disclosed.

Defenders should treat any traffic to or from secure‑esl‑org.lat as suspicious, enforce strict outbound filtering, and consider adding the domain to internal deny lists. Continuous monitoring of the IP address 45.61.49.139 for anomalous activity is advised, and any credential submission attempts originating from this host should be blocked and investigated.