sosoxo[.]com

PhishDestroy identifies sosoxo.com as a live credential theft portal engineered to harvest user login details under the guise of a legitimate service. This domain resolves to IP address 82.112.229.131 and was registered on April 04, 2025 through Fewmoretaps OU d/b/a Trustname.com, a registrar known for anonymizing registrant data. The site utilizes a ZeroSSL certificate to appear trustworthy, masking its phishing intent behind a veneer of encryption. Threat telemetry shows the domain remains undetected on 95 VirusTotal engines, enabling prolonged malicious operations. This domain was flagged under active investigation after confirming it serves a counterfeit login interface mimicking an established platform, tricking visitors into submitting account credentials directly to the attacker. The domain remains unlisted on major threat intelligence feeds despite the clear malicious design, and current blocklist coverage stands at 0/95 detection engines as of the latest scan. The recent registration date—just days ago—indicates a rapidly deployed campaign designed to evade historical reputation systems and target unsuspecting users during a critical window of low detection coverage. Users who visited sosoxo.com should immediately review account credentials for unauthorized access and revoke any sessions initiated through this domain. Disconnect devices from untrusted networks if sensitive data was entered, and scan systems for malware using a reputable endpoint protection tool. Report the domain to your IT security team and consider enabling multi-factor authentication on all linked accounts to prevent credential misuse. Do not re-enter login details on this domain or any linked subpages.