portalonlineinfo[.]info

The domain portalonlineinfo.info, now offline, was an impersonation scam targeting brands like base, Facebook, and WordPress. Despite its current status, 12 out of 93 VirusTotal vendors flagged it as malicious, indicating its potential threat level. PhishDestroy was the first to detect this domain on December 22, 2025, just two days after its creation, showcasing its rapid identification capabilities.

The domain was registered with Name.com, Inc and hosted on an IP address associated with Omegatech LTD in the Netherlands. It lacked an SSL certificate, a common trait in phishing sites aiming to avoid detection. The page's title, "Domain Default page," suggests it might have been a quickly set up operation, possibly to exploit unsuspecting users before being taken down.

PhishDestroy's blocklist includes this domain, reflecting its commitment to combating such threats. The platform risk score was relatively low at 10/100, but the abuse score was higher at 41/100, indicating significant malicious activity. The impersonation of well-known brands suggests a targeted approach to deceive users into providing sensitive information.

The takedown of portalonlineinfo.info highlights the importance of quick detection and response in the cybersecurity landscape. Phishing domains often exploit the gap between registration and detection by antivirus vendors, but PhishDestroy's proactive measures help mitigate these threats during their early stages. This case underscores the ongoing battle against cyber threats and the need for continuous vigilance.