radiofonistas[.]org

This domain, radiofonistas.org, is flagged as a high-risk credential phishing site targeting users through deceptive login portals. Analysis indicates no direct association with known brand impersonation or drainer kits, suggesting a generic phishing campaign designed to harvest credentials for unauthorized access. The infrastructure appears to be purpose-built for malicious activity, with no legitimate content or historical use identified. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 188.114.96.3, registered through NAMECHEAP INC on April 03, 2025. VirusTotal reports 6 out of 95 security vendors flagging the domain as malicious, while Google Safe Browsing (GSB) status remains unconfirmed at this time. No additional blocklist entries beyond the VirusTotal detections have been observed, though the domain's recent creation and lack of historical reputation amplify concerns. The domain remains active as of the latest verification, with no evidence of takedown or mitigation efforts. Response actions should include immediate blocking of the domain and IP at the network perimeter, alongside user education to recognize phishing indicators such as suspicious URLs and unsolicited login prompts. Despite the limited detection count, the domain's recent registration, lack of legitimate use, and active status warrant continued monitoring and proactive defense measures to prevent credential theft or further exploitation.