ict-low-partners[.]ink

This domain, ict-low-partners.ink, is identified as a generic phishing resource designed to harvest user credentials through deceptive landing pages. Analysis indicates no direct association with a specific brand or drainer kit, though the infrastructure aligns with common phishing campaign patterns. The site was configured to mimic legitimate login portals, likely targeting corporate or financial sector credentials, though no active payload was observed during the last scan. Infrastructure analysis reveals the domain was registered on April 26, 2026, through NameCheap, Inc., and resolved to the IP address 188.114.96.3, a Cloudflare-hosted endpoint. Detection metrics show 4 out of 95 security vendors flagged the domain on VirusTotal, while it appeared on a single security blocklist. The page title, '404 Not Found,' suggests either a takedown or deliberate obfuscation of the phishing content. Technologies detected include Cloudflare Browser Insights and HTTP/3, indicating the use of modern CDN-based evasion techniques. The domain is currently offline, likely due to enforcement actions or voluntary suspension. However, residual risk remains due to the domain's recent registration and prior phishing classification. Users who interacted with the site before takedown may still be vulnerable to credential misuse. Recommendations include monitoring for unauthorized access attempts, resetting exposed credentials, and blocking the domain and associated IP at the network perimeter. Further investigation into the registrar's abuse response is advised to prevent recurrence.