infoscreening[.]co

This domain, infoscreening.co, is flagged as a credential harvesting phishing site targeting users through deceptive login interfaces. Analysis indicates it is currently offline, though prior activity suggests it was designed to capture sensitive authentication details under the guise of a legitimate service. No specific brand impersonation has been confirmed, but the infrastructure aligns with common phishing tactics. Infrastructure analysis reveals the domain was registered through Tucows Domains Inc. on February 21, 2026, and resolves to the IP address 103.134.152.28. It is detected on 1 security blocklist and has a Gridinsoft trust score of 0/100. VirusTotal reports 0/95 detections, indicating no vendor flags at the time of analysis. The site employed WordPress, MySQL, PHP, Yoast SEO, LiteSpeed, jQuery Migrate, jQuery, and Google Analytics, with a Let's Encrypt SSL certificate. The page title, 'Home - Infoscreening,' suggests a generic front for phishing operations. Current status is offline, but the domain remains a potential threat due to its recent registration and prior phishing indicators. Recommendations include monitoring for reactivation, blocking the IP 103.134.152.28 at the network level, and alerting users to avoid interaction with the domain. Security teams should review logs for connections to this IP or domain and investigate any credential submissions tied to it. If the domain resurfaces, immediate takedown procedures should be initiated.