itexpertreports[.]info

Analysis of itexpertreports.info indicates a high‑risk, active generic phishing operation. The site returns HTTP 200 and presents the page title "IT Expert Reports". Infrastructure details show the domain resolves to IP 162.240.148.101, which is hosted in the United States and associated with an Oracle‑owned data center. Registration occurred on 16 April 2026 via a well‑known registrar, using the default GoDaddy nameservers ns59.domaincontrol.com and ns60.domaincontrol.com. The TLS certificate is issued by a public certificate authority (Sectigo), confirming proper HTTPS support. Web‑server fingerprints reveal the use of a standard HTTP server and a popular front‑end framework, alongside common JavaScript libraries and a content delivery network. Reputation data is negative: the domain appears on one security blocklist, holds a Gridinsoft trust score of 35 / 100, and is specifically blocked by a phishing‑focused sinkhole. VirusTotal scans report eight of ninety‑four scanners flagging the domain, reinforcing malicious intent. While the exact phishing payload or targeted brand is not disclosed, the combination of a recent registration, low trust score, blocklist inclusion, and multiple vendor detections justifies treating the domain as malicious. Defenders should immediately block DNS resolution and HTTP traffic to itexpertreports.info, monitor for any outbound connections to its hosting IP, and consider adding the domain to internal blocklists and threat‑intel feeds. Ongoing telemetry should be collected to detect any evolving techniques, but current evidence warrants strict containment.