content[.]am-technewz[.]com

This domain, content.am-technewz.com, is flagged as a credential theft operation designed to exploit nonprofit organizations through deceptive security training lures. Analysis of the page title, 'AI-Enhanced Security Fundamentals for Nonprofits,' indicates an attempt to impersonate legitimate educational or cybersecurity resources, likely targeting employees or volunteers with limited technical awareness. The domain does not appear to deploy a known cryptocurrency drainer kit but instead focuses on harvesting login credentials through fraudulent forms or redirects to spoofed authentication portals. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain resolves to the IP address 72.61.247.131 and was registered on February 21, 2026, through HOSTINGER operations, UAB, a registrar frequently associated with phishing infrastructure. Detection metrics include a VirusTotal score of 8/95 security vendors, placement on two security blocklists, and a Gridinsoft trust score of 0/100. The site employed LiteSpeed and Hostinger technologies, alongside HTTP/3, to enhance delivery speed and evade basic detection mechanisms. Google Safe Browsing (GSB) does not currently list the domain, suggesting either recent takedown or evasion of automated crawlers. As of the latest assessment, content.am-technewz.com has been taken offline, likely in response to reports from PhishDestroy and PhishingDB, which previously blocked the domain. However, residual risk remains due to the potential reuse of the underlying infrastructure or registration of similar domains by the same threat actor. Organizations are advised to monitor for domains registered through the same registrar, resolve to the same IP range, or employ identical page titles. Users who interacted with the site should immediately rotate credentials for any accounts entered and enable multi-factor authentication where available. Proactive blocking of the IP 72.61.247.131 and domains registered via HOSTINGER operations, UAB, during the February 2026 timeframe is recommended for network-level defense.