clasjgg[.]com

The domain clasjgg.com is identified as a credential harvesting phishing site targeting users through deceptive login portals. Analysis confirms this domain was actively used to capture sensitive authentication details before being taken offline. No specific brand impersonation has been attributed to this domain at this time, though generic login templates were likely employed. Infrastructure analysis reveals clasjgg.com was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolved to the IP address 188.114.97.3 and was flagged by 2 of 95 security vendors on VirusTotal. A Gridinsoft trust score of 0/100 further corroborates its malicious classification. The domain appears on one security blocklist and was previously referenced in a single AlienVault OTX threat intelligence pulse. As of the latest assessment, clasjgg.com has been taken offline, though residual risk remains for systems that may have interacted with it prior to deactivation. Organizations are advised to block the domain and its associated IP at the perimeter, review logs for any connections to 188.114.97.3, and alert users who may have engaged with the site. Monitoring for related domains registered through the same registrar is recommended to preempt potential follow-up campaigns.