ichse[.]ac[.]in

Analysis of ichse.ac.in, flagged as generic phishing, shows the domain is currently offline. The domain was created on 10 January 2018 and is registered through ERNET India. DNS resolution points to IP 89.117.139.238, which belongs to AS47583 Hostinger International Limited based in the United States. The hosting provider is identified as Hostinger International Limited. No TLS certificate is presented for the host, and an HTTP request returns a 403 Forbidden page title, indicating the server is actively refusing access.

The domain uses the parking nameservers ns1.dns-parking.com and ns2.dns-parking.com, a configuration commonly associated with parked or abandoned domains. Reputation services assign a Gridinsoft trust score of 0 out of 100, and the domain appears on a single security blocklist. PhishDestroy has recorded the domain as blocked. VirusTotal analysis shows that 7 of 93 scanned security vendors flagged the domain, confirming malicious intent. The combination of a low trust score, blocklist presence, and multiple vendor detections aligns with the elevated risk rating.

Uncertainty remains regarding the specific phishing payload or targeted brand, as the page content was not captured before the site was taken offline, and no SSL certificate or further metadata is available. Defenders should continue to block traffic to 89.117.139.238, add ichse.ac.in to local deny lists, and monitor for any re‑registration attempts. Ongoing observation of the hosting ASN and associated IP range is advised, as adversaries may reuse the infrastructure for future campaigns. The current offline status does not eliminate the possibility of rapid re‑activation; thus, detection rules should reference the domain name, resolved IP, and associated nameservers.