ins-guinee[.]com

This domain, ins-guinee.com, is flagged as a generic phishing site designed to harvest credentials from unsuspecting users, particularly targeting Francophone audiences. The page title 'Site en construction' suggests an attempt to mimic a legitimate but temporarily unavailable service, a common tactic to lower suspicion while capturing login details or distributing malware. Analysis indicates the domain may have been used to impersonate corporate or government portals, given its naming convention and regional targeting, though no specific brand impersonation has been confirmed at this time.

Technical evidence supports the classification of ins-guinee.com as a phishing threat. The domain was registered on January 25, 2025, through OVH, SAS, a registrar frequently abused for malicious infrastructure. It resolves to the IP address 213.186.33.5 and is flagged by 7 out of 95 security vendors on VirusTotal, including detections for phishing and fraudulent activity. Additionally, the domain appears on one security blocklist and has been referenced in one AlienVault OTX threat intelligence pulse, further corroborating its malicious nature. The current offline status suggests takedown action or abandonment by the threat actor, but historical exposure remains a risk.

Users who visited ins-guinee.com or entered credentials on the site should take immediate remediation steps. Any passwords or sensitive information submitted must be considered compromised and changed across all platforms where the same credentials were reused. Devices used to access the domain should undergo a full security scan to detect potential malware or backdoors. If financial or personally identifiable information was exposed, monitor accounts for unauthorized activity and consider placing a fraud alert with relevant institutions. Given the domain's recent creation and targeting of Francophone users, heightened vigilance is advised for similar phishing attempts using regional or linguistic themes.