iiqa-itvkqfko-itvkqfko-iiqa[.]jindunqst[.]com

The domain iiqa-itvkqfko-itvkqfko-iiqa.jindunqst.com has been identified as a generic phishing threat, currently offline but previously active. This domain was designed to impersonate legitimate services to deceive users into revealing sensitive information, though no specific brand is being mimicked. Its current offline status suggests it may have been taken down after detection, but similar domains could resurface.

Technical analysis reveals that this domain was flagged by 15 out of 95 security vendors on VirusTotal, indicating a high level of malicious consensus. It appears on two separate security blocklists, further corroborating its threat status. The domain was registered through Gname.com Pte. Ltd. on September 24, 2024, and resolves to IP address 103.75.15.107. Notably, the domain lacks an SSL certificate, which is a common characteristic of phishing sites. The page title observed was "域名停靠," a Chinese phrase often associated with parked or malicious domains.

Given the elevated risk level and the domain's confirmed phishing nature, users are strongly advised to avoid any interaction with this domain or similar variations. If any credentials were inadvertently entered, they should be changed immediately and monitored for unauthorized use. Organizations should consider blocking the IP 103.75.15.107 and the domain pattern to prevent future access. PhishDestroy recommends reporting any related URLs to security teams and maintaining vigilance against phishing attempts that exploit similar domain structures.