productivitytab[.]co

The domain productivitytab.co was a phishing site engaged in brand impersonation targeting WordPress users. It posed as a legitimate WordPress-related service to deceive visitors into disclosing login credentials or other sensitive information. No crypto drainer kit was associated with this campaign. The site is currently taken offline, but it previously exhibited elevated risk due to its deceptive practices.

Productivitytab.co was flagged by 3 of 95 security vendors on VirusTotal, including ADMINUSLabs, alphaMountain.ai, and ESET. It appeared on 2 security blocklists (PhishDestroy and CryptoFirewall) and was registered through NameCheap, Inc. on February 20, 2020. The domain resolved to the IP address 192.185.16.61, hosted in the US under AS19871 (Network Solutions, LLC). Its SSL certificate was issued by Let's Encrypt (R13), and the observed page title was 'Home - ProductivityTab'. AlienVault OTX recorded the domain in 6 threat intelligence pulses, while Gridinsoft assigned it a trust score of 0/100. Detected technologies included WordPress, MySQL, PHP, and Apache HTTP Server.

Individuals who interacted with productivitytab.co should immediately change any passwords entered on the site, particularly those linked to WordPress accounts. Enabling two-factor authentication (2FA) on all associated accounts is strongly recommended to mitigate further risk. Victims should monitor their accounts for unauthorized activity and report the incident to their organization's IT security team or a dedicated fraud reporting service. The domain can also be reported to Google Safe Browsing, PhishTank, or the impersonated brand (WordPress) for further investigation.