sclz-ypqolgxx-ypqolgxx-sclz[.]jindunqst[.]com

The domain sclz-ypqolgxx-ypqolgxx-sclz.jindunqst.com has been identified as a credential theft threat, currently offline. This domain was designed to steal login credentials by impersonating a legitimate service, though no specific brand was named in the intelligence reports. Its status as offline suggests it has been taken down, but users should remain cautious as similar domains may reappear.

PhishDestroy's analysis reveals that this domain was flagged by 15 out of 95 VirusTotal security vendors, indicating strong evidence of malicious intent. It was registered through Gname.com Pte. Ltd. on September 24, 2024, and resolves to the IP address 103.75.15.107. The domain appears on two security blocklists and lacks an SSL certificate, further signaling its untrustworthiness. The page title was observed as "域名停靠," which is a Chinese phrase commonly used for parked domains.

Given that the domain is now offline, the immediate risk is mitigated, but users who may have interacted with it should change any credentials entered and monitor for suspicious activity. PhishDestroy recommends avoiding any domains with similar naming patterns and ensuring that all online services use HTTPS with valid certificates. Always verify URLs before entering sensitive information, and report any suspicious domains to security authorities.