76651166[.]com

This domain, 76651166.com, is identified as a potential site for credential theft. The domain does not appear to be associated with a specific brand or to use a known drainer kit. However, the threat level is elevated due to the high number of security vendor detections and the domain's offline status, which may indicate it has been taken down due to malicious activity.

Infrastructure analysis reveals that 76651166.com has a VirusTotal score of 20 out of 95, indicating a significant level of detection by security vendors. The domain is registered through GoDaddy.com, LLC, and resolves to the IP address 103.143.28.212, which is located in Hong Kong (AS135581 ONL-HK). The domain was created on August 11, 2018, and is currently listed on one security blocklist. The SSL certificate is issued to Default Company Ltd, which is a common placeholder and may suggest a lack of legitimate identity verification.

The current status of 76651166.com is offline, which could be a result of actions taken by security organizations or the domain owner to mitigate the threat. Despite being offline, the domain remains flagged by PhishDestroy, a security blocklist, indicating that it poses a residual risk. Users are advised to avoid visiting this domain and to ensure that their browsers and security software are up to date to protect against any potential reinfection or related threats. Additionally, organizations should monitor their networks for any attempts to access this domain and consider implementing DNS filtering to block it.