creatonwal[.]co[.]com

The domain creatonwal.co.com was registered on February 21 2026 through Moniker Online Services LLC. Its authoritative name servers are ns1.nic.co.com, ns2.nic.co.com, ns3.nic.co.com, and ns4.nic.co.com. VirusTotal records show a single detection out of 93 scanning engines, indicating that at least one security vendor has flagged the site as malicious. The domain appears on one external security blocklist and has been actively blocked by the PhishDestroy service. The only observable page attribute is the title tag, which repeats the domain name, and no additional content or metadata has been captured during the brief observation period.

The current operational status is offline, reflecting that the site has been taken down or is otherwise inaccessible at the time of analysis. The evidence points to a generic phishing campaign, though the specific target brand, credential collection mechanism, or malicious payload has not been identified in the available data. Defenders encountering DNS queries, HTTP requests, or email links that resolve to this domain should treat it as malicious, enforce DNS‑level blocking, and incorporate the domain into inbound and outbound filtering policies. Monitoring for related indicators such as the listed nameservers, future registrations under the same registrar, or repeat use of the same detection pattern may aid in detecting follow‑on activity.

Because no hosting IP, SSL certificate, or HTTP response details are present, further network‑level investigation is limited to the domain metadata supplied. Organizations should also review historical logs for any prior connections to this domain and consider user awareness training to reduce the risk of credential compromise. Continued vigilance is recommended while the threat actor may adapt to new infrastructure.