com-portal-net[.]pro

This domain, com-portal-net.pro, is flagged as a high-risk generic phishing site designed to harvest user credentials. Analysis indicates no direct association with known brand impersonation or drainer kits, though its infrastructure aligns with common credential theft campaigns. The domain exhibits characteristics typical of phishing operations, including recent registration and minimal detection on security platforms, suggesting an attempt to evade automated defenses. Infrastructure analysis reveals the following technical indicators: the domain was registered on June 25, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It currently resolves to the IP address 188.114.97.3, a Cloudflare-associated endpoint often leveraged to mask hosting origins. VirusTotal detection is minimal, with only 1 out of 95 security vendors flagging the domain as malicious. The SSL certificate is issued by Google Trust Services, providing a veneer of legitimacy while failing to mitigate the underlying threat. No entries were found on Google Safe Browsing (GSB) or major blocklists at the time of analysis, further indicating its low visibility to conventional threat intelligence feeds. The domain remains active, posing an ongoing risk to users who may encounter it through phishing emails, malicious advertisements, or compromised redirects. Response actions should include immediate blocking of the domain and IP at the network perimeter, as well as monitoring for related infrastructure (e.g., subdomains or sibling IPs). Despite its low detection rate, the domain's recent registration and association with a known registrar used in phishing campaigns justify a high-risk classification. Users are advised to verify URLs before entering credentials and to report any suspicious activity linked to this domain for further investigation.