theprogressivegroup[.]starbearingcentre[.]com

Analysis of theprogressivegroup.starbearingcentre.com shows a domain created on 7 May 2025 that is currently taken offline. The domain resolves to IP address 178.16.53.131, which belongs to AS202412 owned by Omegatech LTD and is geolocated in the Netherlands. Authoritative name servers ns1.regery.net, ns2.regery.net, and ns3.regery.net all point to the same hosting infrastructure, indicating a single‑point hosting arrangement. The only visible page title is “Account Security Check,” a phrasing commonly employed in credential‑harvesting schemes to lure victims into submitting login information.

The site uses a Let’s Encrypt R12 certificate, providing transport encryption but offering no validation of the entity behind the domain. Gridinsoft assigned a trust score of 0 out of 100, reflecting an extremely low confidence in the domain’s legitimacy. The domain is listed on one security blocklist, PhishDestroy, which has already classified it as malicious. VirusTotal reports that 15 of 95 scanning engines flagged the domain, further corroborating malicious intent.

Registration was performed through Hosting Concepts B.V. d/b/a Registrar.eu, a registrar that appears in multiple abuse reports. No additional intelligence such as OTX or Safe Browsing entries is provided. Given the recent creation date, zero trust score, blocklist presence, multiple AV detections, and a page title that directly targets account security, the domain should be treated as a high‑confidence phishing indicator. Defensive recommendations include adding both the domain and its resolved IP address to outbound and inbound deny lists, monitoring the domain’s DNS records for any re‑activation, and ensuring that user‑facing security solutions warn against unsolicited “Account Security Check” prompts that reference this URL.