Community Intel & Discussions
⚠️ Potential Phishing Infrastructure Detected
Risk Category: High-Risk Redirect / New Domain Registration
URLert.com has classified the domain myportal.now as a potential security risk following observations of suspicious redirection patterns and recent infrastructure changes. While the domain currently points to a legitimate enterprise portal, the underlying characteristics of the registration suggest it may be part of a staged phishing campaign.
- Recent Registration: Security telemetry confirms that SSL certificates for this domain were generated via Let's Encrypt only 10 days ago. This lack of established history is a significant red flag for infrastructure used in short-lived cyberattacks.
- Deceptive Redirection: The subdomain
engie.myportal.nowcurrently redirects to a legitimate third-party service. This tactic, often referred to as "domain shadowing" or "bait-and-switch," is frequently used by threat actors to bypass automated security filters before activating a malicious payload or credential harvesting page. - Lack of Reputation: The domain is currently unranked on major traffic indices (Tranco), indicating it is not a recognized corporate asset.
- Generic Naming Convention: The use of a generic "myportal" string on a
.nowTLD is highly characteristic of phishing kits designed to impersonate employee login pages and harvest corporate credentials.
Recommendation: Users should exercise extreme caution and avoid entering any sensitive information or corporate credentials on this site. Always verify the destination URL in your browser's address bar and rely on official internal bookmarks for accessing company portals. If you are redirected here from an unsolicited email or message, report it to your IT security team immediately.
URL: https://engie.myportal.now
I checked this URL and it looks safe. It is just a redirected website.