inkfoundation[.]live

The domain inkfoundation.live is a phishing site engaged in brand impersonation, specifically targeting the INK brand. It poses an elevated risk as a scam designed to deceive users into believing they are interacting with a legitimate INK-related platform. No crypto drainer kit was identified, but the site was actively impersonating INK before being taken offline.

Technical indicators confirm the malicious nature of inkfoundation.live. The domain was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and SOCRadar, and appeared on 3 security blocklists (PhishDestroy, MetaMask, and SEAL). It was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on March 14, 2026, and resolved to the IP address 188.114.96.3, hosted by Cloudflare, Inc. in the US. The SSL certificate was issued by Let's Encrypt, and the observed page title was 'Un instant…'. Gridinsoft assigned the domain a trust score of 0/100, and technologies detected included HSTS, Cloudflare Browser Insights, and HTTP/3.

Users who interacted with inkfoundation.live should take immediate safety steps. If credentials were entered, change passwords for the affected accounts and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity and report any fraudulent transactions. To report the domain, submit it to platforms like Google Safe Browsing, PhishTank, or the impersonated brand’s security team. Victims of brand impersonation scams should also consider filing a report with local cybercrime authorities or consumer protection agencies.