information-resolv[.]xyz

PhishDestroy identifies information-resolv.xyz as an active credential-phishing domain posing an elevated risk to unwary visitors. This site mimics official resolution or login portals to harvest usernames and passwords, exposing victims to subsequent account takeovers and identity theft.

This domain was flagged by VirusTotal with 6 out of 95 security vendors detecting malicious content. It is registered through PDR Ltd. d/b/a PublicDomainRegistry.com, resolves to IP address 188.114.96.3, and operates with a Let’s Encrypt SSL certificate. The domain first appeared on March 29, 2026, less than one day ago, indicating a recently deployed campaign. Early blocklists and telemetry suggest rapid escalation from benign to malicious behavior, with low reputation across multiple threat intelligence feeds.

Users should avoid entering any credentials or personal data on this site. Security teams and individuals can mitigate risk by blocking the domain at DNS and network levels, reporting the IP 188.114.96.3 to upstream providers, and inspecting endpoints that may have communicated with it. Passwords used on this domain should be rotated immediately on trusted platforms. For continued protection, monitor for follow-on phishing emails or SMS messages referencing this domain or IP.