66xingji[.]com

This domain, 66xingji.com, is confirmed to operate as a credential theft phishing site designed to harvest user login credentials through deceptive branding. The page title, 'Welcome to - 星际娱乐,' suggests an attempt to impersonate a legitimate entertainment or gaming platform, likely targeting Mandarin-speaking users. Analysis of the site's infrastructure reveals the use of Baidu Analytics (百度统计) for tracking visitor interactions, a common tactic in phishing campaigns to monitor victim engagement and refine attack vectors. The domain presents itself as a legitimate service, increasing the likelihood of successful credential capture from unsuspecting users. Evidence supporting the malicious classification includes detection by 16 out of 95 security vendors on VirusTotal, a trust score of 0/100 from Gridinsoft, and presence on one security blocklist. The domain was registered through Realtime Register B.V. on May 7, 2026, an unusually future-dated creation that may indicate an attempt to evade detection or appear legitimate. It resolves to the IP address 168.76.229.168 and has been observed in three threat intelligence pulses on AlienVault OTX. Technologies detected on the site include Bootstrap for frontend design, Nginx as the web server, and HTTP Strict Transport Security (HSTS) enforcement, which may be used to lend an air of legitimacy to the phishing page. Users who visited 66xingji.com should immediately take corrective actions to mitigate potential compromise. All credentials entered on the site should be considered exposed and must be changed from a secure device. Enable multi-factor authentication (MFA) on all accounts where possible to prevent unauthorized access. Monitor financial and personal accounts for suspicious activity, as stolen credentials may be used for follow-on attacks. If the site was accessed in a corporate environment, report the incident to the internal security team for further investigation and containment. The domain has since been taken offline, but users should remain vigilant for similar phishing attempts targeting entertainment or gaming services.