allin1builders[.]com

The domain allin1builders.com was registered on April 04, 2025 through NameSilo, LLC. Since its creation, multiple security vendors have flagged the site as part of a generic phishing campaign, and it currently carries a high risk rating. VirusTotal scans show that 15 of 91 antivirus and URL‑reputation engines label the domain as malicious, indicating a notable level of detection across the ecosystem. Independent blocklist providers have also added the domain to three separate blocklists, and it is presently blocked by PhishDestroy, MetaMask, and SEAL, demonstrating that at least three anti‑phishing solutions are actively denying traffic to the site.

The available intelligence does not include details such as hosting IP address, SSL certificate status, or the exact page title displayed when the site is accessed, so the precise technical footprint remains partially opaque. Likewise, no public evidence has been published regarding the phishing kit or the specific brand being impersonated, limiting the ability to attribute the campaign to a particular threat actor. Nonetheless, the convergence of registration data, multi‑vendor detection, and blocklist presence provides a clear indication that the domain is being used for malicious credential‑harvesting or fraud attempts.

Defenders should continue to block allin1builders.com at the perimeter and within endpoint protection suites, monitor for any outbound connections to the domain, and consider adding the domain to internal deny lists. Organizations that rely on email or web filtering should verify that their solutions reference the latest blocklists that already contain the domain. Because the hosting infrastructure has not been publicly disclosed, threat‑intel teams may wish to query passive DNS and WHOIS services for any subsequent changes to the domain’s IP address or name‑server configuration, which could signal a shift in the campaign’s infrastructure.