login[.]it-admincenter[.]com

PhishDestroy has identified login.it-admincenter.com as a credential phishing threat with an elevated risk level. This domain was specifically designed to steal login credentials, targeting users who may mistake it for a legitimate IT administration portal. The domain is now offline, but the risk remains for those who may have interacted with it previously.

Analysis reveals that the domain was created on October 21, 2021, and registered through Amazon Registrar, Inc. It resolved to IP address 34.194.247.17 and used a Let's Encrypt SSL certificate (R13). VirusTotal flagged the domain with 17 out of 95 security vendors marking it as malicious, and it appeared on one security blocklist. These indicators collectively confirm the domain's malicious intent and poor reputation.

Users who may have entered credentials on this site should immediately change those passwords on the legitimate services and enable multi-factor authentication where available. It is also recommended to monitor accounts for unauthorized access and run a security scan on any devices that may have visited the domain. PhishDestroy advises staying vigilant against similar phishing attempts and always verifying URLs before entering sensitive information.