bio-huerto[.]com

Analysis of bio-huerto.com, created on 26 February 2013 and registered through IONOS SE, shows an active infrastructure supporting a generic phishing campaign. The domain resolves to IP 213.158.86.47, hosted in Belgium under AS34762 Combell NV, and is served by Nginx with a WordPress stack that includes MySQL, PHP, Chart.js, Bootstrap, OWL Carousel, and Modernizr. The site presents an HTTP 200 response but returns a page title of "403 Forbidden," indicating potential access control mechanisms. TLS is provided by a Let’s Encrypt certificate (R12). Reputation metrics are uniformly negative: Gridinsoft scores 0/100, Scamadviser 1/100, and 12 of 95 VirusTotal scanners flag the domain. It appears on two public blocklists (PhishDestroy and PhishingDB) and is referenced in 16 AlienVault OTX threat pulses. MX records list the domain itself as the sole mail exchanger. While the exact phishing lure is not disclosed, the convergence of a high detection count, low trust scores, and blocklist presence confirms a high‑risk profile. Defenders should block DNS resolution to 213.158.86.47, deny outbound connections to the domain, and monitor email traffic for the domain’s MX record. Continuous threat‑intel feeds should be consulted for any updates, and any observed credential or payment attempts should be treated as compromised.