sfsddsg[.]vip

This domain, sfsddsg.vip, is flagged as a credential theft phishing site targeting users through deceptive login portals. Analysis indicates no direct association with a specific brand or cryptocurrency drainer kit, though the infrastructure aligns with common phishing campaigns designed to harvest account credentials for financial fraud or unauthorized access. The lack of brand impersonation markers suggests a broader, opportunistic targeting strategy rather than a focused impersonation of a single entity. Infrastructure analysis reveals the domain was registered on September 25, 2025, through a major registrar, with no SSL certificate deployed. It resolves to the IP address 47.253.99.169, hosted on Alibaba (US) Technology Co., Ltd. infrastructure (AS45102). Security vendor detection on VirusTotal stands at 17/95, indicating moderate consensus on its malicious nature. The domain appears on two security blocklists, including PhishDestroy and PhishingDB, and was not listed in Google Safe Browsing at the time of assessment. The absence of SSL further reduces user trust signals, increasing the likelihood of detection by security controls. The domain is currently offline, likely due to takedown actions or infrastructure suspension. However, the elevated risk persists due to the domain's recent registration and association with known phishing infrastructure. Organizations are advised to block the domain and its resolving IP at the network level, while users should remain cautious of similar domains leveraging newly registered, certificate-less infrastructure. Monitoring for re-registration or IP reuse under different domains is recommended to mitigate residual threats.