infoval[.]lol

Analysis of the domain infoval.lol reveals an active phishing campaign targeting users with a generic account verification scam. The domain was registered on May 16, 2026, through Global Domain Group LLC, a registrar frequently associated with malicious domains. As of July 29, 2026, the domain remains operational and is flagged by 18 of 91 security vendors on VirusTotal, indicating elevated risk. It also appears on one security blocklist, specifically PhishDestroy, which categorizes it as a phishing threat.

Infrastructure analysis shows no additional details regarding hosting providers, autonomous system numbers (ASNs), or associated IP addresses. The exact content of the phishing page has not been fully analyzed, though the domain name suggests an attempt to deceive users into believing it is a legitimate information validation or account verification service. No specific brand impersonation is confirmed in the available data, and the page title or phishing kit details remain unreported. Defenders should treat this domain as a confirmed phishing threat.

Network-level blocking is recommended, particularly for organizations using PhishDestroy or similar security tools. Given the domain's recent registration and detection by multiple security vendors, monitoring for newly registered domains with similar naming patterns (e.g., 'info' or 'val' prefixes/suffixes) may help preempt related campaigns. Further investigation into the registrar's role in facilitating such domains could provide additional context for mitigation strategies. No evidence links this domain to broader threat actor infrastructure at this time.