0365ff[.]com

This domain, 0365ff.com, is flagged as a credential phishing site impersonating the 365 UK listings platform, as indicated by its page title '365英国上市官网.' Analysis reveals no direct association with known drainer kits or cryptocurrency wallets, suggesting a focus on harvesting user credentials for financial or identity fraud. The domain's infrastructure and content are designed to mimic legitimate UK-based listing services, increasing the likelihood of successful deception among targeted users. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 216.118.239.164, hosted on AS45753 (Netsec Limited) in Hong Kong. It was registered on April 07, 2017, through NameSilo, LLC, and holds an SSL certificate issued by Google Trust Services (WE1). VirusTotal reports 22 out of 95 security vendors flagging the domain as malicious, while it appears on a single blocklist, PhishDestroy. The domain is not currently listed in Google Safe Browsing databases, which may delay automated browser-based protections. As of the latest assessment, 0365ff.com has been taken offline, reducing immediate exposure risks. However, the domain's historical activity and prolonged registration period (over six years) indicate a persistent threat. Users who may have interacted with the site should immediately reset credentials for any associated accounts, particularly those tied to financial or personal data. Organizations are advised to monitor network logs for connections to the IP address 216.118.239.164 and implement domain-based blocking as a precautionary measure. The elevated risk level persists due to the domain's established infrastructure and potential for reactivation.