ifctru[.]top

This domain, ifctru.top, has been assessed with an elevated risk level and is identified as a generic phishing site impersonating the International Finance Corporation. The threat involves the creation of a fake login page designed to steal user credentials and sensitive information.

Infrastructure analysis reveals that ifctru.top resolves to the IP address 188.114.97.3 and was registered through NameSilo, LLC on March 18, 2026. The domain is currently offline and appears on three security blocklists. VirusTotal reports that 3 out of 95 security vendors flag this domain as malicious, indicating a moderate level of threat recognition. The site uses technologies such as Vue.js, HSTS, Cloudflare, and HTTP/3, which are common in modern web development and can sometimes be employed to enhance the credibility of phishing sites.

To mitigate the risk associated with this domain, users are advised to verify the authenticity of any login pages they encounter, especially those purporting to represent the International Finance Corporation. Organizations should update their security policies to block this domain and educate employees about the signs of phishing attacks. Network administrators can also consider implementing DNS filtering and firewall rules to prevent access to ifctru.top and similar domains.