igit[.]me

This domain is flagged as a high-risk credential harvesting phishing site. Analysis indicates it masquerades as a legitimate URL shortener service, a common tactic to deceive users into submitting sensitive login details or personal information. The threat type is classified as generic_phishing, with infrastructure designed to evade initial detection while actively targeting victims. Infrastructure analysis reveals the domain igit.me was registered on November 06, 2024, through NAMECHEAP INC. It resolves to the IP address 184.174.39.202 and uses a Let's Encrypt SSL certificate to appear legitimate. The domain is currently active and appears on 2 security blocklists. VirusTotal reports 15 out of 95 security vendors flagging this domain as malicious, while Gridinsoft assigns a trust score of 0/100. AlienVault OTX lists it in one threat intelligence pulse, and it is blocked by PhishDestroy and OpenPhish. Mitigation steps include immediate blocking of the domain and its resolving IP (184.174.39.202) at the network perimeter. Security teams should monitor for any internal traffic to igit.me and conduct retrospective analysis to identify potential credential exposure. User awareness training should emphasize the risks of interacting with unsolicited URL shorteners, particularly those lacking verifiable origins. If credentials were submitted, reset them immediately and enable multi-factor authentication where possible. Network logs should be reviewed for connections to the domain or IP to assess compromise scope.