masonversluis[.]pro

This domain, masonversluis.pro, operates as a generic phishing site impersonating OLIF Professional Services, a likely fabricated entity designed to deceive users into disclosing sensitive credentials or financial information. Analysis of the page title, 'OLIF professional Services,' suggests an attempt to mimic legitimate business service portals, potentially targeting corporate or individual users seeking professional consultancy. The site may employ social engineering tactics, such as fake login forms or fraudulent invoicing, to harvest user data under the guise of a trusted service provider. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain is flagged by 12 out of 95 security vendors on VirusTotal, with additional blocks enforced by three independent security blocklists. Registered through HOSTINGER operations, UAB, the domain was created on February 21, 2026, an anomalous future date likely resulting from registrar data manipulation to evade detection. The site resolves to the IP address 51.91.219.191 and employs HTTP/3, a protocol rarely used in legitimate phishing campaigns but potentially leveraged here to bypass traditional network security controls. Users who accessed masonversluis.pro should immediately terminate any active sessions and avoid interacting with the site. Credentials or payment details entered on this domain should be considered compromised; affected users must reset passwords for all associated accounts, enable multi-factor authentication where available, and monitor financial statements for unauthorized transactions. Network administrators should block the domain and its resolving IP at the perimeter, while endpoint protection systems should be updated to include this indicator of compromise. Given the domain's current offline status, continued vigilance is advised, as threat actors may re-deploy the infrastructure under a different name or IP.