innovaperutours[.]com

This domain, innovaperutours.com, is flagged for credential phishing, a threat type targeting user authentication data through deceptive interfaces. Analysis indicates an elevated risk level due to its recent registration and detection across multiple security platforms. The domain was created on April 24, 2026, a date inconsistent with typical legitimate business timelines, further raising suspicion. Infrastructure analysis reveals the domain resolves to the IP address 109.199.122.83 and is registered through Porkbun LLC. Security vendor detections on VirusTotal report 7 out of 95 engines flagging the domain as malicious. The domain appears on one security blocklist and has a trust score of 0/100, indicating no credibility. Additional intelligence sources, including one threat intelligence pulse on AlienVault OTX, corroborate its association with phishing activity. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious domains due to its accessibility. Detected technologies include Mobirise, Bootstrap, Apache HTTP Server, jQuery, and Popper, which are often leveraged to create convincing phishing pages. To mitigate the risks associated with credential phishing, organizations and users should implement multi-factor authentication (MFA) to reduce the impact of stolen credentials. Network-level protections, such as blocking the domain and its associated IP address (109.199.122.83), should be enforced immediately. Security teams are advised to monitor for indicators of compromise, including the domain, IP, and any related infrastructure. User education on recognizing phishing attempts, particularly those mimicking login portals, is critical to preventing successful attacks. Regular audits of SSL certificates and domain registrations can also help identify anomalous or recently created domains that may pose threats.