tooneandco[.]com

This domain tooneandco.com is classified as a high-risk generic phishing infrastructure utilizing a reCAPTCHA Verification themed landing page. The observed threat behavior indicates credential harvesting intent, where users are socially engineered into completing verification steps that may capture sensitive authentication data. The risk level is assessed as high due to active deployment and multiple independent detection signals.

Technical indicators confirm malicious infrastructure characteristics. VirusTotal analysis reports 10/95 security vendors flagging the domain as malicious. The domain was registered on June 13, 2026 via OwnRegistrar, Inc. It resolves to IP address 37.77.150.237, geolocated in RU under AS198953 Proton66 OOO. The SSL certificate is issued by Let's Encrypt (YR2). The domain is currently active and appears on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL, reinforcing cross-platform detection consensus.

The domain remains operational, indicating ongoing phishing campaign activity rather than a dormant artifact. The combination of recent registration date, low-cost hosting infrastructure, and verification-themed lure suggests high probability of continued credential theft attempts. Recommended mitigations include DNS-level blocking, endpoint URL filtering, and user awareness controls specifically targeting fake verification pages. Given current activity and blocklist coverage, residual risk remains elevated and requires continuous monitoring and rapid takedown escalation.