Analysis of the domain ibachetko.works indicates it is an active phishing infrastructure under investigation as of July 31, 2026. Registered on November 15, 2025, through Web Commerce Communications Limited (WebNic.cc), the domain resolves to the IP address 158.94.211.169 and uses nameservers a.dnspod.com, b.dnspod.com, and c.dnspod.com, suggesting potential ties to DNS hosting services commonly associated with malicious activity. While 91 security vendors on VirusTotal currently report no detections for this domain, the absence of flags does not confirm safety, as phishing infrastructure often evades initial detection.
The domain appears on at least one security blocklist, specifically PhishDestroy, which has flagged it for suspicious behavior. No additional details regarding the specific brand targeted, phishing kit used, or exact content of the site are currently available, as the page has not been fully analyzed. Defenders are advised to treat ibachetko.works as high-risk until further evidence confirms its legitimacy.
Network-level blocking at the DNS or IP level is recommended, particularly for organizations that may be targeted by credential harvesting campaigns. Continuous monitoring of related infrastructure, including the hosting IP and nameservers, is warranted to identify potential lateral movement or additional malicious domains.