6h073[.]com

This domain, 6h073.com, is identified as a generic phishing site designed to deceive users into submitting sensitive credentials. The page title '欢迎' (Welcome) suggests an attempt to mimic legitimate login portals, though no specific brand impersonation or drainer kit signatures have been confirmed. The absence of SSL encryption and the use of a non-descriptive page title indicate a low-effort but potentially effective phishing operation targeting broad audiences rather than a tailored campaign. Infrastructure analysis reveals the domain was registered on December 12, 2023, through Gname.com Pte. Ltd., a registrar frequently associated with abusive domains. It resolves to the IP address 103.232.223.36, hosted under AS59371 (Dimension Network & Communication Limited) in Hong Kong. Detection metrics show 18 out of 95 security vendors on VirusTotal flagging the domain as malicious, while it appears on two independent security blocklists. Google Safe Browsing (GSB) does not currently list the domain, though this may reflect a lag in detection rather than benign status. As of the latest assessment, 6h073.com has been taken offline, likely due to hosting provider intervention or registrar enforcement. However, the elevated risk persists due to the domain's recent creation and prior malicious activity. Users who accessed the site should assume credential exposure and initiate password resets for any accounts entered. Organizations are advised to monitor for related domains registered through the same registrar or resolving to the identified IP, as threat actors often reuse infrastructure across campaigns.