palevioletred-llama-288075[.]hostingersite[.]com

PhishDestroy identifies palevioletred-llama-288075.hostingersite.com as a credential-harvesting phishing site designed to trick users into surrendering email or password details. The page mimics a legitimate login interface to capture keystrokes and credentials, which attackers can then abuse for account takeovers or financial fraud. It resolves to IP 88.222.222.5 and runs over an active SSL certificate issued by DigiCert Inc, lending a false veneer of legitimacy to worried visitors. This domain was flagged on 1 security blocklist and remains under investigation by PhishDestroy. VirusTotal currently records 0 detections out of 95 scanners, underscoring the stealth of the campaign. The name was registered through HOSTINGER operations, UAB on June 22, 2023, making it just over eight months old and still actively serving malicious pages. Early takedown attempts by ScamSniffer have not yet succeeded, so the threat remains live. If you visited this site, assume any login attempt exposed your email or password. Rotate those credentials immediately on a known-safe device and enable multi-factor authentication wherever possible. Next, run a reputable antivirus scan to rule out malware introduced via drive-by downloads. Finally, report the domain to your email provider or workplace security team using the exact hostname above, so they can block it company-wide.