member[.]partneragencyportal[.]com

This domain, member.partneragencyportal.com, is actively engaged in credential harvesting phishing operations targeting users through a deceptive interface labeled 'Accounts Centre.' The site is designed to mimic legitimate account management portals, tricking visitors into entering sensitive login credentials, which are then captured by threat actors. Such campaigns typically target corporate or financial service users, exploiting trust in familiar branding to facilitate unauthorized access to accounts or systems. Analysis indicates this domain was registered on April 24, 2026, through the registrar Gransy, s.r.o. It resolves to the IP address 188.114.97.3, located within Cloudflare, Inc.'s infrastructure in Canada. The domain appears on one security blocklist and is flagged by 22 out of 95 security vendors on VirusTotal, reflecting an elevated risk level. The SSL certificate is issued by Google Trust Services under the WE1 intermediate, a common practice among phishing domains to appear legitimate and evade basic security filters. If a user has visited member.partneragencyportal.com or entered credentials on the site, immediate action is required. First, revoke any entered credentials by changing passwords for all potentially affected accounts, prioritizing those linked to financial, email, or corporate services. Enable multi-factor authentication where available to mitigate further risk. Monitor accounts for unauthorized activity, such as unfamiliar transactions or login attempts. If corporate credentials were compromised, notify the organization’s security team to initiate incident response protocols. Users should also scan their devices for malware, as phishing sites may deploy additional payloads.