imap[.]sspl[.]com[.]au

This domain, imap.sspl.com.au, is identified as a high-risk phishing site specifically designed to mimic an email login portal. Analysis indicates the threat type is a fake login credential harvester, likely targeting users of corporate or personal email services. As of the latest assessment, the domain has been taken offline, though prior activity remains a concern for historical exposure. Infrastructure analysis reveals the domain resolves to IP address 185.184.154.169, located in Australia under AS38719 (Dreamscape Networks Limited). It is registered through Web Address Registration Pty Ltd. The site was flagged by 14 of 95 security vendors on VirusTotal, and appears on two independent security blocklists. Google Safe Browsing has also classified this domain as phishing. The SSL certificate is issued by Let's Encrypt (R12), a common tactic to lend superficial legitimacy to malicious infrastructure. The page title, 'Index of /', suggests an exposed directory listing, which may indicate poor operational security or an abandoned attack vector. Current status confirms the domain is offline, reducing immediate risk of active exploitation. However, the infrastructure remains a potential threat vector for future campaigns. Organizations are advised to add imap.sspl.com.au and its associated IP (185.184.154.169) to perimeter blocklists. Endpoint protection systems should be updated to recognize this domain as malicious. Users who may have interacted with the site should reset credentials immediately, particularly if login details were entered. Network logs should be reviewed for connections to the IP or domain within the past 90 days to assess potential compromise.