# efjncjfnvkjfnvnjknfjdjd.com — SUSPICIOUS

> PhishDestroy flags efjncjfnvkjfnvnjknfjdjd.com with 0/95 VirusTotal detections. This untargeted phishing lure is live—read the full report.

## Summary
PhishDestroy identifies efjncjfnvkjfnvnjknfjdjd.com as an active phishing domain registered on April 11, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain is weaponized with a generic credential-harvesting kit designed to mimic a wide range of consumer login pages. No branded spoof (e.g., Microsoft 365, PayPal, Netflix) has been positively matched in the current campaign sample, leaving victims exposed to broad identity theft. Official brand logos or trademarks are absent; threat actors are using randomly generated strings to evade takedown and improve domain-reputation laundering.  

This domain resolves to IP 188.114.97.3 and is secured with a Let’s Encrypt TLS certificate. VirusTotal currently records 0 out of 95 detection engines flagging the sample. WHOIS data shows NICENIC INTERNATIONAL GROUP CO., LIMITED as the sponsoring registrar with a newly minted domain age of under twenty-four hours. As of the last scan, the URL has not been added to Google Safe Browsing (GSB) and remains absent from all public blocklists, giving it a clean reputation window despite active phishing delivery attempts.  

At the time of analysis, efjncjfnvkjfnvnjknfjdjd.com remains classified as active with a risk level of under_investigation. PhishDestroy continues to monitor the endpoint for changes in infrastructure and payload delivery paths. Immediate browser-blocking via enterprise DNS or endpoint policy is recommended. Users who may have already visited the site are advised to rotate exposed credentials and enable multi-factor authentication wherever supported. The residual risk remains high until the domain is universally sinkholed or blacklisted; proactive network controls remain the most effective mitigation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-11 07:52:09
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ad7656a7-78b4-4f40-bd06-dffe699e80c7
- PhishDestroy: https://phishdestroy.io/domain/efjncjfnvkjfnvnjknfjdjd.com/
- LLM endpoint: https://phishdestroy.io/domain/efjncjfnvkjfnvnjknfjdjd.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/efjncjfnvkjfnvnjknfjdjd.com/
Last updated: 2026-04-11