The domain offers.integritycleaningsystems.info is currently listed as active and has been identified as a high‑risk phishing site. VirusTotal reports that seven of ninety‑one scanning engines have flagged the domain, providing independent confirmation of malicious intent. The domain does not resolve to a valid authoritative name server (NS_NOT_FOUND), which is a common characteristic of fast‑flux or throwaway phishing infrastructure. It resolves to the single IPv4 address 192.185.52.171; no additional A or AAAA records were observed. The host is presently blocked by the PhishDestroy mitigation service and appears on one external security blocklist, reinforcing its reputation as an abusive resource.
Publicly available metadata does not include a page title, SSL certificate details, or HTTP response codes, so the exact content served by the site remains unknown. Consequently, the specific brand or service being spoofed cannot be confirmed, and the attack vector (e.g., credential harvesting form) is not yet observable. The lack of registrar or WHOIS information in the supplied data further limits attribution of the operators. Defenders should treat offers.integritycleaningsystems.info as hostile.
Immediate actions include adding the domain and its resolving IP address to perimeter firewalls, DNS sinkhole policies, and proxy filtering rules. Continuous monitoring of the IP for any changes in hosting or additional DNS records is advised, as well as periodic rescans on VirusTotal or similar platforms to detect new detections. Organizations employing email security gateways should ensure that inbound messages containing URLs to this domain are quarantined or rejected. Because the site’s content has not been captured, threat‑intel teams should consider requesting a screenshot from a safe browsing sandbox to enrich future analyses.
