member146[.]agency-partner-apply[.]com

PhishDestroy identifies member146.agency-partner-apply.com as an active phishing domain designed to harvest user credentials. The domain mimics legitimate partner or agency application portals, tricking victims into submitting login details that are immediately exfiltrated to malicious actors. This particular campaign leverages urgency, often masquerading as a time-sensitive application process, to bypass user skepticism and maximize successful compromises.

The domain was registered on October 30, 2025, through Gransy, s.r.o., and resolves to IP address 172.67.148.117, which is associated with a known hosting provider tied to malicious activity. Security intelligence platforms have escalated their scrutiny of this domain, with 17 out of 95 VirusTotal vendors flagging it for phishing content. The domain boasts a Google Trust Services SSL certificate, which adds a veneer of legitimacy but provides no actual security guarantees for unsuspecting victims.

If you or your organization have accessed this domain, cease all interactions immediately and scan for signs of credential compromise, such as unauthorized logins or data exfiltration. Report the domain to your internal SOC and external threat intelligence teams to ensure collective defense measures are activated. Implement network-level blocks for the domain and its IP resolution to prevent further exposure. Users who submitted credentials should rotate passwords immediately and enable multi-factor authentication where available. Monitor for follow-on phishing attempts or targeted attacks exploiting the harvested credentials.