ifacia[.]vip

The domain ifacia.vip has been identified as a high-risk phishing infrastructure primarily involved in credential theft. There is no specific brand impersonation or crypto drainer kit associated with the domain. The site is currently displaying a Cloudflare 'Attention Required!' page, indicating that the domain might be using Cloudflare services to obfuscate its true infrastructure or to temporarily redirect traffic while the phishing page is being set up or maintained.

Infrastructure analysis reveals that the domain was created on January 24, 2026, and is registered through Gname.com Pte. Ltd. It resolves to the IP address 188.114.97.3, which is located in California and is associated with CloudFlare, Inc. The domain has been flagged by 6 out of 95 security vendors on VirusTotal, indicating a moderate level of suspicion among the security community. It appears on 1 security blocklist, further confirming its malicious nature.

The domain remains active as of the latest assessment. While it is currently blocked by PhishDestroy, the lack of an SSL certificate and the involvement of a known registrar and IP address associated with Cloudflare suggest ongoing risks. Users are advised to avoid interacting with this domain and to report any related phishing attempts to their security teams or local authorities. Organizations should monitor their systems for any traffic directed to this domain and consider implementing additional security measures to protect against credential theft.