earnfort-flow[.]com

Analysis indicates that the domain earnfort-flow.com was registered on 21 February 2026 and is currently taken offline. DNS resolution points to the IPv4 address 198.12.66.123, which is geolocated to the United States and associated with the individual identified as Sajjad Hassanpour. The domain has been assigned a Gridinsoft trust score of 0 out of 100, reflecting an extremely low reputation.

It is listed on one public security blocklist and has been actively blocked by the PhishDestroy network, confirming its classification as a phishing infrastructure. VirusTotal reports that three of ninety‑three scanned security vendors flagged the domain, reinforcing the malicious assessment despite the limited detection count. No additional intelligence such as registrar information, SSL certificate details, HTTP response codes, or page title has been disclosed, leaving those facets unverified at this time.

Defenders should continue to enforce blocklist entries for earnfort-flow.com and its resolved IP address 198.12.66.123, incorporate the domain into URL filtering policies, and monitor for any resurgence of activity. Given the low trust score, existing blocklist presence, and vendor detections, the risk posture remains elevated. Organizations are advised to treat any communications referencing earnfort-flow.com as hostile and to educate users about the potential for credential‑ harvesting attempts that may have previously leveraged this infrastructure.