sms[.]sellaite[.]com

The domain sms.sellaite.com is currently classified as a high‑risk generic phishing site with a specific crypto‑drainer profile. It resolves to the IPv4 address 80.235.54.10, which is hosted by Telia Eesti AS in Estonia. Authoritative name servers are cns1.estpak.ee and cns2.estpak.ee, and the domain’s MX record points to sellaite.com with priority 10. The site presents an HTTP 200 response and serves a TLS certificate issued by Let’s Encrypt (R13). Infrastructure fingerprints show an Ubuntu operating system behind an Apache HTTP Server, with analytics and advertising scripts from Yandex.Metrika, Google Analytics, Google AdSense, and Funding Choices. The Gridinsoft trust score is 0 / 100, indicating a severely untrusted rating. VirusTotal analysis shows that 2 of 91 security vendors have flagged the domain. It is listed on a single security blocklist and is actively blocked by PhishDestroy. The publicly visible page title, "Receive SMS Online | Voice call verification | SMS to email - SELLAITE," suggests the site is positioned to collect SMS verification codes, a typical vector for crypto‑drainer attacks, though the exact content and credential‑capture mechanisms have not been examined. Defenders should immediately block the domain and its associated IP address at perimeter defenses, update URL filtering and sinkhole feeds, and monitor for any related C2 traffic or credential‑theft attempts. Continuous re‑evaluation is advised, as additional intelligence may emerge regarding the payload or victim interaction patterns.