121hiu[.]senes[.]at

This domain, 121hiu.senes.at, is flagged as a credential theft phishing site. The domain does not appear to impersonate a specific brand but is designed to trick users into revealing sensitive information, such as login credentials. The phishing campaign leverages a page titled 'Staking' to attract and deceive potential victims.

Infrastructure analysis reveals that 121hiu.senes.at has been flagged by 21 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion. The domain is registered with Let's Encrypt and resolves to the IP address 172.86.95.123, which is located in Germany and is part of the AS30823 aurologic GmbH network. The domain does not appear in the Google Safe Browsing database, but it is listed on one security blocklist, specifically PhishDestroy. The creation date and other registration details are not provided, but the elevated risk level suggests that the domain has been actively used for malicious purposes.

As of the latest assessment, 121hiu.senes.at has been taken offline, which reduces the immediate risk to users. However, the domain's previous status as a credential theft phishing site necessitates continued vigilance. Users who may have interacted with the domain should monitor their accounts for any unauthorized activity and consider changing their passwords. Security teams are advised to update their blocklists and educate users about the risks associated with such phishing campaigns.