jostien[.]com

PhishDestroy has identified jostien.com as an elevated-risk threat due to its brand impersonation of Gmail. This domain was specifically crafted to deceive users into believing they are accessing a legitimate Google login page, as evidenced by its page title proclaiming 'Google'. The site posed a direct phishing threat, aiming to harvest sensitive account credentials from unsuspecting visitors.

Technical analysis reveals several concerning indicators. The domain was registered through NameCheap, Inc. and created on June 15, 2023. It resolves to IP address 142.250.193.196, and notably lacks an SSL certificate, which is unusual for any legitimate login page. VirusTotal detected it as malicious, with 1 out of 95 security vendors flagging the domain. It also appears on 1 security blocklist, reinforcing its suspicious nature. No trust scores are available as the domain is now offline, but the combination of these factors warranted a risk level of 'elevated'.

To mitigate this threat, users should verify website URLs carefully before entering credentials, especially for services like Gmail. Always ensure the site uses HTTPS with a valid SSL certificate. If any credentials were entered on jostien.com, they should be changed immediately and multi-factor authentication enabled on the affected account. PhishDestroy recommends using a password manager to autofill credentials only on known legitimate domains. Stay vigilant against similar impersonation attacks by checking for unusual domain names or misspellings like 'jostien' instead of 'gmail'.