idrci[.]net

This domain, idrci.net, is identified as a credential harvesting phishing infrastructure targeting users through deceptive login portals. Analysis indicates no direct association with a specific brand or drainer kit, though the domain exhibits characteristics consistent with generic phishing campaigns designed to capture sensitive authentication details. The infrastructure lacks overt branding, suggesting a broad, opportunistic targeting approach rather than a focused impersonation of a particular service. Infrastructure analysis reveals the domain was registered on June 12, 2026, through NAMECHEAP INC and resolves to the IP address 107.158.128.99. Security vendor detections on VirusTotal report 10/95 engines flagging the domain as malicious, while AlienVault OTX records its presence in 9 threat intelligence pulses. The domain appears on 2 security blocklists, and automated detection systems have previously classified it as a verified phishing threat. No Google Safe Browsing (GSB) classification is currently available, though prior assessments confirm its malicious status. As of the latest verification, idrci.net has been taken offline, likely due to registrar intervention or hosting provider action. Despite its inactive status, residual risk persists due to potential re-registration or migration of the phishing infrastructure to alternative domains. Organizations are advised to monitor for related indicators, including the associated IP address and registration patterns, and to update blocklists to prevent future exposure. Users who may have interacted with the domain should verify account security and reset credentials as a precautionary measure.