jlqqc[.]com

The domain jlqqc.com is currently active and has been classified as a generic phishing site. Registration data shows the domain was created on March 13, 2026 through West263 International Limited, and it is served over HTTPS using a Let’s Encrypt certificate (issuer E8). The web server returns HTTP 200 and presents a page titled "Home". The site is listed as active by multiple monitoring sources and is already blocked by the PhishDestroy blocklist.

Infrastructure analysis reveals that jlqqc.com resolves to the IPv4 address 172.247.72.165, which is allocated to AS40065 (CNSERVERS LLC) and geolocated to the United States. The domain relies on a six‑node Hong Kong name server set (ns1‑ns6.363.hk). The front‑end stack includes Bootstrap, jQuery, Slick, and is hosted on Nginx/OpenResty with HTTP Strict Transport Security (HSTS) enabled, indicating an attempt to appear legitimate and to protect the transport layer.

Threat intelligence signals include a Gridinsoft trust score of 0 out of 100 and a presence on one security blocklist. VirusTotal scans have flagged the domain by one of ninety‑five security vendors, supporting the phishing classification. No additional malicious payloads or credential‑stealing forms have been publicly disclosed, leaving the exact phishing lure and targeted brands uncertain.

Defenders should proactively block both the domain jlqqc.com and its resolved IP address 172.247.72.165 at network perimeters. Continuous monitoring of the domain’s DNS records is advised, as the extensive set of Hong Kong nameservers could be used to rotate the resolution target. Updating URL filtering, email gateway, and endpoint detection rules to include this indicator will reduce exposure to the ongoing generic phishing campaign.