jxqc99[.]com

This domain, jxqc99.com, is classified as a high-risk credential harvesting phishing site. Analysis indicates it employs deceptive tactics by presenting itself as an adult content portal, using page titles in Chinese that suggest free streaming services. The site is designed to trick users into entering login credentials or personal information under false pretenses, a common technique in phishing campaigns targeting sensitive data. Infrastructure analysis reveals the domain was registered on April 13, 2023, through Gname.com Pte. Ltd. It resolves to the IP address 104.233.251.204 and uses a Let's Encrypt SSL certificate, which provides HTTPS encryption but does not validate the legitimacy of the site. VirusTotal detection rates show 6 out of 95 security vendors have flagged the domain as malicious, indicating moderate but not universal recognition of its threat status. The domain remains active as of the latest verification, with no evidence of takedown or sinkholing. Mitigation steps for this specific threat type include immediate blocking of the domain and its associated IP address (104.233.251.204) at the network perimeter. Organizations should deploy web filtering rules to prevent access to jxqc99.com and monitor for any internal systems attempting to resolve or communicate with it. End-user education should emphasize the risks of credential submission on unverified adult content sites, particularly those using generic or free SSL certificates. Security teams are advised to review logs for any prior interactions with this domain and conduct password resets for users who may have engaged with the site. Indicators of compromise (IOCs) for this domain should be shared with threat intelligence platforms to aid in broader detection efforts.