client[.]738620-cb[.]com

This domain, client.738620-cb.com, is identified as a credential harvesting phishing site targeting users through social engineering tactics. Currently, the domain is offline, though it previously hosted infrastructure designed to deceive visitors into disclosing sensitive login credentials or personal information. No specific brand impersonation has been confirmed, but the domain’s structure and behavior align with generic phishing campaigns aimed at broad exploitation. Analysis indicates the domain was registered through OwnRegistrar, Inc., and resolves to the IP address 107.189.17.124. It was flagged by 19 of 95 security vendors on VirusTotal, reflecting widespread detection as malicious. The domain was created on May 31, 2026, an anomalous future date that may indicate registry manipulation or misconfiguration. Infrastructure analysis reveals the use of Ubuntu and Nginx technologies, common in phishing server setups. The domain appears on three security blocklists, and Google Safe Browsing has categorized it under SOCIAL_ENGINEERING. Trust scores from independent sources, such as Gridinsoft, are at 0/100, further confirming its malicious nature. The domain is currently offline, though its prior activity and infrastructure warrant continued monitoring. Organizations and users are advised to block the domain and its associated IP address (107.189.17.124) at the network level. Security teams should review logs for connections to this domain or IP and investigate potential credential exposure. If the domain reactivates, it should be treated as an active threat. Proactive measures, such as updating endpoint protection rules and educating users on social engineering risks, are recommended to mitigate similar threats.