portal[.]ictcoin[.]com

The domain portal.ictcoin.com is currently flagged as an active credential theft threat. This domain is potentially impersonating the ICTCoin brand to deceive users into divulging sensitive information. Its status is considered elevated, requiring immediate attention from internet users who may interact with this domain.

The domain was created on January 26, 2025, and is registered through Dynadot LLC. It resolves to the IP address 75.2.115.196, located in the United States, under the Amazon.com, Inc. network (AS16509). Analysis by VirusTotal indicates that 9 out of 95 security vendors have flagged this domain as malicious. The domain does not have an SSL certificate and has been blocked by PhishDestroy. Additionally, it appears on one security blocklist, heightening the risk associated with its use.

Currently, portal.ictcoin.com remains active, posing a significant threat to users who may be targeted for credential theft. It is recommended that users avoid interacting with this domain and report any phishing attempts to relevant authorities. Network administrators should consider blocking the domain at the firewall level to prevent exposure. Continuous monitoring for any related suspicious activity is advised to mitigate potential security breaches.