sp858637[.]sitebeat[.]crazydomains[.]com

The domain sp858637.sitebeat.crazydomains.com is identified as a generic phishing site. There is no specific brand targeted, and no drainer kit has been identified. The primary threat is credential theft, as indicated by the page title 'Authenticate' and the domain's presence on security blocklists.

Infrastructure analysis reveals that the domain was created on February 21, 2026, and is registered through Dreamscape Networks International Pte Ltd. The SSL certificate is issued by Sectigo Limited / Sectigo RSA Domain Validation Secure Server CA, which may lend a false sense of security to unsuspecting users. The domain resolves to the IP address 103.67.235.120, located in Australia under the network AS38719 Dreamscape Networks Limited. According to VirusTotal, 18 out of 95 security vendors flagged this domain as malicious. The domain currently appears on 1 security blocklist and is listed as taken offline by PhishDestroy.

The domain is currently offline, which reduces the immediate risk of active phishing attacks. However, the infrastructure remains in place, and the domain could be reactivated at any time. Organizations and individuals are advised to ensure that this domain is blocked in their network security policies and to monitor for any signs of reactivation. Additionally, users should be educated about the risks of phishing and the importance of verifying the authenticity of websites before entering sensitive information.