orders[.]intravu[.]com

This domain, orders.intravu.com, poses an elevated risk of fake login scams. Users who visit this site may be tricked into entering their login credentials, leading to potential account compromise and data theft. The domain has been flagged by multiple security vendors and is associated with known phishing activity.

Analysis indicates that orders.intravu.com has been flagged by 16 out of 95 security vendors on VirusTotal, suggesting a moderate level of suspicion. The domain was created on March 04, 2014, and is registered through GoDaddy.com, LLC. It currently resolves to the IP address 205.209.125.74, which is located in the United States and is part of the AS19318 Interserver, Inc network. The site has been taken offline and appears on 2 security blocklists, including PhishDestroy and PhishingDB. The SSL certificate used was issued by ZeroSSL RSA Domain Secure Site CA, which is a common provider for free SSL certificates.

If an individual has visited orders.intravu.com, they should immediately change passwords for any accounts they may have entered credentials into while on the site. It is recommended to enable two-factor authentication (2FA) for added security. Additionally, users should monitor their accounts for any unauthorized activity and consider running a security scan on their devices to ensure no malicious software was installed. Reporting the incident to the relevant service providers and security authorities is also advised.