bertiecottage[.]flonix[.]net

This domain is flagged as a confirmed credential harvesting phishing site under the generic_phishing threat classification, with an elevated risk level. The infrastructure is designed to mimic legitimate login portals, likely to capture user credentials for subsequent unauthorized access or financial fraud. Analysis indicates bertiecottage.flonix.net was registered on May 20, 2018, through Tucows Domains Inc. and resolves to the IP address 149.255.62.151, hosted on AS34931 (Awareness Software Limited, GB). The domain lacks an SSL certificate, increasing the risk of plaintext credential interception. It appears on one security blocklist and is flagged by 12 out of 95 security vendors on VirusTotal. The page title, Bertie Cottage, suggests an attempt to impersonate a legitimate property or service-related portal. The domain was taken offline, but residual risk remains for users who may have interacted with it prior to deactivation. Mitigation steps include blocking the domain and its associated IP (149.255.62.151) at the network perimeter. Organizations should monitor for credential reuse attempts from affected accounts and enforce multi-factor authentication (MFA) for all external-facing portals. End-users who accessed the site should reset passwords for any accounts using the same credentials and scan systems for malware. Security teams are advised to review logs for connections to 149.255.62.151 or DNS queries for bertiecottage.flonix.net to identify compromised endpoints.