openscore[.]tw

This domain, openscore[.]tw, is flagged as an active credential harvesting phishing site designed to deceive visitors into disclosing sensitive login credentials, financial details, or personal information. The site masquerades as a legitimate luxury intelligence platform under the brand name PINNACLE, using sophisticated social engineering tactics to exploit trust in high-end brands. Visitors encountering this domain may be prompted to enter usernames, passwords, credit card numbers, or other confidential data, which are then transmitted to threat actors for fraudulent use or resale on underground markets. Analysis indicates that openscore[.]tw was registered on March 31, 2026, through Dynadot LLC, a domain registrar commonly exploited by malicious actors due to its accessibility and privacy features. The domain resolves to the IP address 172.67.132.4, hosted on Cloudflare’s infrastructure (AS13335), which is frequently leveraged to obfuscate the true origin of phishing campaigns. As of the latest assessment, 8 out of 95 security vendors on VirusTotal have flagged this domain as malicious, with detections including credential theft, phishing, and fraudulent content. The SSL certificate, issued by Let’s Encrypt (serial number YE2), provides a false sense of security, as encrypted connections do not guarantee legitimacy. The domain appears on at least one security blocklist and is actively blocked by enterprise-grade threat intelligence platforms. If you or a user within your network has visited openscore[.]tw or entered any information on the site, immediate action is required to mitigate potential compromise. First, disconnect the affected device from the network to prevent further data exfiltration. Reset all passwords for accounts accessed from the device, prioritizing email, financial services, and administrative credentials, using a separate, secure device. Enable multi-factor authentication (MFA) on all critical accounts to add an additional layer of security. Scan the device with updated antivirus and anti-malware tools to detect and remove any persistent threats. Monitor financial statements and credit reports for unauthorized transactions or signs of identity theft. Report the incident to relevant cybersecurity authorities or internal security teams to support broader threat intelligence efforts. Users should remain vigilant for follow-up phishing attempts via email, SMS, or social media, as threat actors may reuse harvested data for further attacks.