seidorus[.]com

PhishDestroy identifies seidorus.com as a credential theft domain currently under active investigation for generic phishing campaigns. This domain resolves to IP 188.114.97.3 and was registered through Fewmoretaps OU d/b/a Trustname.com on February 24, 2026. It leverages a Let’s Encrypt SSL certificate and remains undetected by VirusTotal, with 0/95 security engines flagging its payload. No known drainer kit or specific brand impersonation has been associated with this domain at this time. Technical indicators include full VirusTotal non-detection (0/95), a recently registered domain age, and hosting on a single IP tied to a registrar known for bulk domain registrations. Despite its clean VT score, the domain’s youth and lack of historical reputation suggest potential for rapid abuse. It has not yet been flagged by Google Safe Browsing and remains unblocked by major threat intelligence platforms. The domain is actively live and poses a medium-to-high risk due to its potential for rapid malicious deployment. Users should refrain from interacting with seidorus.com and ensure endpoint controls monitor connections to IP 188.114.97.3. Organisations are advised to block the domain and IP at network egress points and monitor for emerging abuse patterns. The current risk level remains under investigation pending further behavioral analysis.