weatherforce[.]info

This domain, weatherforce.info, is a credential theft operation designed to deceive users by mimicking legitimate weather service platforms. Victims are lured through fake alerts or urgent weather notifications, which redirect to fraudulent login pages. Once entered, credentials are captured for unauthorized access to accounts, financial services, or other sensitive platforms. The site specifically targets users seeking weather updates, exploiting trust in weather-related services to bypass skepticism. Analysis indicates this domain was registered on May 5, 2026, through NameCheap, Inc., and is hosted on infrastructure in Singapore (Alibaba Cloud). It resolves to the IP address 47.241.9.5 and lacks an SSL certificate, a common red flag for malicious sites. Security vendors on VirusTotal flagged this domain as malicious, with 20 out of 95 engines detecting it. Additionally, it appears on two security blocklists and is actively blocked by multiple threat intelligence feeds, reinforcing its classification as a high-risk credential theft site. If you visited weatherforce.info or entered any information on this site, immediately change passwords for all accounts where the same credentials were used. Enable multi-factor authentication (MFA) on critical services, such as email, banking, and social media platforms. Monitor accounts for unauthorized activity, including login attempts or transactions you did not initiate. If financial data was exposed, contact your bank or payment provider to secure your accounts. Use reputable security tools to scan devices for malware, as credential theft sites often deploy additional payloads. Report the incident to relevant cybersecurity authorities or your organization’s IT security team for further guidance.