support[.]itdepartment[.]services

PhishDestroy identifies support.itdepartment.services as an active generic phishing domain hosting a fraudulent IT department login portal designed to harvest corporate credentials. support.itdepartment.services was flagged by 18 of 95 VirusTotal security vendors and currently resolves to IP 20.50.64.14. The domain is registered under Let’s Encrypt for SSL encryption and first appeared on two public phishing blocklists: OpenPhish and PhishingArmy. Registrar details and creation date remain publicly undisclosed, and Google Safe Browsing has not yet flagged the page. These indicators suggest a recently activated campaign rather than a long-standing operation. This domain is currently active and remains accessible despite detection by two blocklists and partial detection by 18% of VirusTotal scanners. Organizations and end-users should immediately block support.itdepartment.services via DNS or firewall rules and avoid visiting the site. If credentials were entered, users should rotate passwords and enable multi-factor authentication on all related accounts. While risk remains elevated due to low but increasing detection coverage, proactive blocking mitigates exposure. Users are advised to verify any IT support communications through official corporate channels before entering login details.