folcepri[.]info

This domain, folcepri.info, is identified as a credential harvesting phishing site designed to steal user login credentials. Such sites typically mimic legitimate login portals for financial institutions, email providers, or corporate networks, tricking victims into entering sensitive information that is then captured by threat actors. The domain’s infrastructure and content are engineered to evade casual detection while actively soliciting user input under false pretenses. Analysis indicates this domain was registered on March 18, 2026, through NameSilo, LLC, a registrar frequently observed in phishing operations. It resolves to the IP address 188.114.97.3, hosted on infrastructure associated with a content delivery network, which is commonly exploited to mask the true origin of malicious activity. Security vendors on VirusTotal have flagged this domain as malicious, with 18 out of 95 engines detecting it as a phishing threat. The domain also appears on one security blocklist, further corroborating its malicious classification. The SSL certificate, issued by Let’s Encrypt, provides encryption but does not validate the legitimacy of the site. If you visited folcepri.info or entered any information on the site, immediate action is required. First, cease all interaction with the domain and disconnect the affected device from the network to prevent further data exfiltration. Change passwords for any accounts accessed or entered on the site, prioritizing financial, email, and work-related credentials. Enable multi-factor authentication where available to add an additional layer of security. Monitor accounts for unauthorized activity and report any suspicious transactions to the relevant service providers. If corporate credentials were exposed, notify your organization’s IT or security team to initiate incident response protocols.