itlinks[.]pk

This domain, itlinks.pk, has been confirmed as a high-risk phishing site designed to mimic legitimate tracking services. The primary threat posed by this domain involves tricking users into providing sensitive information such as login credentials, personal data, or financial details. Once this information is obtained, attackers can use it for identity theft, financial fraud, or further compromise of user accounts.

Analysis indicates that itlinks.pk was registered through DE-HETZNER-20090224 (ASN: 24940) and created on July 17, 2020. The domain resolves to the IP address 95.217.148.220, which is located in FI (AS24940 Hetzner Online GmbH). It has been flagged as a phishing site by Google Safe Browsing and 20 out of 95 security vendors on VirusTotal. Additionally, it appears on 2 security blocklists, including PhishDestroy and PhishingDB. The SSL certificate was issued by Let's Encrypt, further indicating efforts to appear trustworthy to unsuspecting users.

If users have visited itlinks.pk, they should immediately change any passwords or sensitive information that may have been entered on the site. It is recommended to run a full system scan for malware and to monitor financial and personal accounts for any unusual activity. Users should also report the incident to their organization's IT security team and consider enabling multi-factor authentication for added protection.