dev[.]flow[.]abqweather[.]com

PhishDestroy identifies dev.flow.abqweather.com as a credential-stealing phishing site masquerading as a legitimate weather service. The domain uses a Let's Encrypt SSL certificate to appear trustworthy, but its true purpose is to capture usernames and passwords under false pretenses. Users who enter login details risk handing over sensitive account information to cybercriminals.

This domain was flagged by PhishDestroy after analysis revealed it has operated since August 09, 2000, registered through ENOM, INC., and currently resolves to IP address 185.149.120.183. Despite zero detections on VirusTotal at the time of analysis, the site remains active and poses an ongoing threat to unsuspecting visitors. Its longevity and low detection rate suggest it may be part of a larger, stealthy phishing campaign targeting weather-related services.

If you visited dev.flow.abqweather.com, assume your login credentials may have been compromised. Immediately change your password for any accounts you entered on the site and enable multi-factor authentication where available. Scan your device for malware using reputable security software and monitor your accounts for suspicious activity. Avoid re-entering credentials on the site, as it continues to operate despite warnings.