infobase365[.]online

This domain, infobase365.online, is flagged as an active brand impersonation threat targeting Radiant, a known entity in the building materials sector. Registered on December 2, 2025, through DNSPod, Inc., the domain currently resolves to the IP address 43.153.89.12. It appears on two security blocklists and is detected by 11 out of 95 security vendors on VirusTotal, indicating a high-risk classification. The site presents itself with the page title 'Unlock the Benefits: Learn About Metal Roofs for Durability, Energy Efficiency, and Aesthetic Appeal,' suggesting an attempt to lure users with content related to roofing products, likely to harvest credentials or distribute malicious payloads. Infrastructure analysis reveals the use of WordPress, MySQL, PHP, and Nginx, alongside Yoast SEO and Cloudflare Browser Insights, which are common technologies for legitimate sites but frequently exploited in phishing operations. The SSL certificate is issued by ZeroSSL, a provider often used by both legitimate and malicious actors. The domain has a Gridinsoft trust score of 0/100, reinforcing its classification as a high-risk asset. Additionally, it is referenced in 22 threat intelligence pulses on AlienVault OTX, further confirming its association with malicious activity. What remains uncertain is the exact mechanism of compromise, as the site’s content has not been fully analyzed. However, the combination of brand impersonation, technical indicators, and blocklist presence strongly suggests an intent to deceive users into interacting with fraudulent material. Defenders should treat this domain as hostile and prioritize blocking it at the network level. Monitoring for related domains registered through the same registrar or resolving to the same IP may uncover additional threats. If internal logs show any user interaction with infobase365.online, immediate incident response is recommended to assess potential credential exposure or malware delivery.