feedina[.]ma

Feedina.ma, a phishing domain, has been flagged by 12 out of 95 vendors on VirusTotal, indicating a significant level of malicious activity. It was first identified by PhishDestroy on November 30, 2025, and has since been taken down. Despite its offline status, the domain had already made an impact, being listed on two public blocklists: PhishDestroy and PhishingDB.

The domain was registered through HEBERFACILE and hosted on an IP address associated with OVH SAS in France. Notably, it used a Let's Encrypt SSL certificate, which may have been employed to lend an air of legitimacy to the phishing site. The use of a free SSL certificate is a common tactic among cybercriminals to exploit users' trust in secure connections.

Feedina.ma's prompt detection is crucial in the fight against phishing, as it underscores the importance of early identification and takedown of malicious domains. The fact that it was flagged by multiple security vendors highlights the effectiveness of collaborative threat intelligence efforts. While the domain is no longer active, its presence on public blocklists serves as a reminder of the ongoing threat posed by phishing operations.