factltt[.]com

factltt.com is a recently registered domain identified as a generic phishing site. Security researchers and blocklists flag this domain due to its association with deceptive tactics designed to mimic legitimate services. While no specific brand impersonation or drainer kit has been confirmed, the domain’s structure and recent creation date suggest opportunistic phishing operations targeting unsuspecting users.

Technical indicators confirm this domain’s malicious intent. VirusTotal reports a detection rate of 2 out of 95 security vendors, indicating limited but validated malicious activity. The domain resolves to IP address 104.21.82.228 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 11, 2025. Its SSL certificate, issued by Google Trust Services, does not mitigate its elevated risk. Additionally, factltt.com appears on 1 security blocklist and is actively blocked by PhishDestroy, reinforcing its credibility as a phishing threat.

This domain remains active and poses an elevated risk to users. Immediate action includes blocking access to factltt.com via DNS filtering or endpoint solutions. Security teams should add this domain to threat intelligence feeds for proactive defense. While current blocklists mitigate exposure, the domain’s recent registration and low but present detection rate suggest it may evolve or expand operations. Users are advised to exercise caution and verify domains before engagement to avoid potential credential theft or malware delivery.