portfolio-mtmask[.]com

The domain portfolio-mtmask.com is currently active and resolves to the IP address 188.114.96.3, which is hosted by Cloudflare, Inc. in Canada. DNS resolution is served by betty.ns.cloudflare.com and plato.ns.cloudflare.com. The site returns HTTP 200 responses and presents a TLS certificate issued by Google Trust Services under the WE1 designation, indicating a valid HTTPS endpoint. Threat intelligence shows the domain is listed on three public blocklists and has been flagged by 11 of 91 security vendors on VirusTotal. AlienVault OTX references include two separate threat pulses that cite this infrastructure. Registration details indicate the domain was purchased through Internet Domain Service BS Corp, and it is actively blocked by PhishDestroy, MetaMask, and SEAL. While the precise content of the hosted page has not been publicly disclosed, the combination of a legitimate‑looking certificate, cloud‑based hosting, and multiple detections suggests a high‑risk phishing campaign targeting users who may be prompted to submit credentials. Defenders should block network traffic to 188.114.96.3, add portfolio-mtmask.com to local deny lists, and monitor for related hash or URL indicators in email gateways and web proxies. Continuous observation of the domain’s activity and periodic re‑scans are recommended to capture any evolution of the payload or additional malicious indicators.