1665cccc[.]com

This domain, 1665cccc.com, is flagged as a credential harvesting phishing site targeting users through generic phishing tactics. Analysis confirms the domain is currently offline, though it was previously active in malicious campaigns designed to harvest login credentials or sensitive information. No specific brand impersonation was identified, but the infrastructure aligns with typical phishing operations. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on February 21, 2026, an unusually future-dated creation that may indicate domain spoofing or registry manipulation. It resolves to the IP address 23.145.136.51, geolocated in Japan under AS209242 (Cloudflare London, LLC). The domain appears on one security blocklist, and 22 of 95 security vendors on VirusTotal flagged it as malicious. The SSL certificate is issued to 'Default Company Ltd,' a common indicator of low-effort or automated phishing setups. The domain is currently offline, but historical activity and infrastructure details warrant continued monitoring. Organizations are advised to block the domain and its resolving IP at the perimeter. Security teams should review logs for connections to 23.145.136.51 or DNS queries for 1665cccc.com, particularly from February 2026 onward. If the domain reappears, immediate takedown procedures should be initiated to mitigate further risk.