growthpartnerslimited[.]com

The domain growthpartnerslimited.com was registered through HOSTINGER operations, UAB and first observed on 18 September 2022. Current DNS configuration points to authoritative nameservers ns3.ddoscure.com and ns4.ddoscure.com, and the A record resolves to the public IPv4 address 5.196.175.67. The hosting infrastructure is not linked to any known cloud provider in the available data, and no SSL certificate details have been disclosed. Threat intelligence sources have placed the domain on a single security blocklist, and PhishDestroy explicitly blocks it.

VirusTotal analysis shows that 7 of 91 scanned security vendors flagged the domain as malicious, confirming a consensus of detection across multiple engines. The risk rating assigned is high and the operational status remains active as of the report date. No additional context such as page title, brand targeting, or specific phishing kit has been released, leaving the exact payload or credential‑harvesting technique undefined.

Analysts should continue to monitor DNS changes, especially any addition or replacement of nameservers, and watch for new resolutions that could indicate pivoting to additional hosting locations. Immediate mitigation steps include adding the domain and its associated IP address to outbound filtering rules, updating internal blocklists, and ensuring that any email gateway or web proxy enforces the block reported by PhishDestroy. Because the domain is actively resolving and is already flagged by multiple vendors, proactive blocking is recommended while further investigation—such as HTTP response inspection and TLS certificate retrieval—is conducted to determine the full scope of the phishing campaign.