panorama-public[.]info

panorama-public.info is a newly registered domain (created 15 July 2026) that has been observed in active phishing campaigns. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and uses the authoritative name servers ns3.my-ndns.com and ns4.my-ndns.com. DNS resolution points to the IPv4 address 45.12.2.101, which remains reachable at the time of analysis. Reputation services have flagged the domain; Google Safe Browsing lists it for social engineering, and the PhishDestroy feed has added it to its blocklist. VirusTotal reports that six of ninety‑one scanning engines have identified malicious behavior associated with the host, indicating a non‑trivial detection rate. The domain also appears on one additional security blocklist, reinforcing its classification as a threat. The six vendor detections include signatures for credential harvesting and malicious redirect behavior, which aligns with the generic phishing classification. No public SSL certificate details or HTTP response codes have been published, and the page title has not been captured, so visual or content‑based indicators are not available for further correlation. The combination of recent registration, active hosting, multiple independent detections, and inclusion on reputable blocklists warrants a high risk rating. Defenders should block DNS resolution to 45.12.2.101, add panorama‑public.info to URL filtering policies, and monitor outbound traffic for attempts to contact the domain. Incident response teams should treat any email or messaging that references this host as potentially malicious and quarantine associated artifacts. Stakeholders should also consider sharing the indicator set with threat intelligence platforms to improve collective defenses. Continuous re‑assessment is advised, as additional detection feeds may surface new indicators of compromise.