illuminanceglobal[.]pro

The domain illuminanceglobal.pro is assessed at an elevated risk level due to its classification as a generic phishing domain. This type of threat is designed to trick users into revealing sensitive information such as login credentials or financial data, often through deceptive web pages that mimic legitimate sites.

Analysis indicates that illuminanceglobal.pro has been flagged by 6 out of 95 security vendors on VirusTotal, suggesting a moderate consensus on its malicious nature. The domain is registered through NameCheap, Inc., and resolves to the IP address 188.114.97.3. It was created on April 24, 2026, which is a relatively recent date, possibly indicating a new campaign. The domain appears on 2 security blocklists, specifically PhishDestroy and OISD. Furthermore, Gridinsoft has assigned it a trust score of 0 out of 100, indicating a complete lack of trustworthiness. The domain uses Cloudflare Browser Insights and Cloudflare for its DNS and HTTP/3 for its protocol, which can be common for both legitimate and malicious sites but may indicate an attempt to obfuscate the true nature of the domain. It currently has a Let's Encrypt SSL certificate, which while not inherently malicious, can be used to lend an air of legitimacy to phishing sites.

To mitigate the risks associated with this generic phishing domain, it is recommended to implement the following steps: Ensure that all endpoints and network devices are configured to block traffic to the IP address 188.114.97.3. Deploy and maintain up-to-date web filters and firewalls that can detect and block known phishing domains. Educate users on the signs of phishing, such as suspicious email addresses, unexpected requests for personal information, and web pages that do not match the expected look and feel of legitimate sites. Conduct regular security audits and monitor for any attempts to access or communicate with this domain. If any user or system has already interacted with this domain, perform a thorough investigation for any signs of data exfiltration or credential compromise.