dbwu-hhfrlidh-hhfrlidh-dbwu[.]jindunqst[.]com

The domain dbwu-hhfrlidh-hhfrlidh-dbwu.jindunqst.com is identified as an elevated generic phishing threat. This domain poses a significant risk of credential theft, financial loss, and potential malware distribution. Users accessing this domain may be directed to fraudulent websites designed to mimic legitimate services, leading to the compromise of sensitive information.

Analysis indicates that the domain dbwu-hhfrlidh-hhfrlidh-dbwu.jindunqst.com was created on September 24, 2024. The domain resolves to the IP address 103.75.15.107, which is located in Hong Kong (AS132839 POWER LINE DATACENTER). VirusTotal reports that 13 out of 95 security vendors have flagged this domain as malicious. It is registered through Gname.com Pte. Ltd. and appears on two security blocklists, including PhishDestroy and PhishingDB. The lack of an SSL certificate further increases the risk, as it suggests the site may not be secure and could be used to intercept data.

If users have visited dbwu-hhfrlidh-hhfrlidh-dbwu.jindunqst.com, they should immediately change any passwords that may have been entered on the site. It is recommended to run a full system scan using up-to-date antivirus software to detect and remove any potential malware. Users should also monitor their financial accounts and credit reports for any unusual activity. Additionally, they should report the incident to their IT security team or a trusted cybersecurity professional for further analysis and mitigation.