ingdirect-particularesportal[.]com

The domain ingdirect-particularesportal.com has been identified as being involved in generic phishing activities. The page title, "Cooperativa Ahorro y Crédito de Barranquitas - ¡Nuestro centro eres Tú!" suggests an attempt to impersonate a legitimate financial institution, possibly to deceive users into disclosing sensitive information. There is no specific mention of a drainer kit being used in this case, but it aligns with typical phishing strategies targeting financial data.

Technical indicators reveal that the domain was registered with NiceNIC International Group Co., Limited and resolves to the IP address 172.67.215.233. The SSL certificate is issued by Google Trust Services / WE1, which might have been used to create a semblance of legitimacy. The domain was created on February 21, 2026, and has been flagged by 4 out of 95 security vendors on VirusTotal, indicating a relatively low but significant detection rate. Additionally, it appears on one security blocklist, further supporting its classification as potentially harmful.

Currently, the domain is offline, reducing immediate risk; however, the presence on a security blocklist suggests it could have posed a threat if accessed while active. Users who might have interacted with this domain should consider reviewing their financial accounts and implementing enhanced security measures such as changing passwords and monitoring for unauthorized transactions. The proactive takedown of the domain underscores the importance of ongoing vigilance and swift response to threats in digital spaces.