asdqxcdsa[.]icu

This domain, asdqxcdsa.icu, is confirmed to operate as a credential theft platform specifically targeting users of financial services. Analysis indicates the infrastructure was designed to harvest login credentials, payment details, and personal identification information through deceptive login portals. The domain is currently offline, though prior activity suggests it may have been part of a larger credential harvesting campaign. Infrastructure analysis reveals the domain was registered through Gname.com Pte. Ltd. on June 12, 2026, with hosting technologies including Nginx and HTTP Strict Transport Security (HSTS) enabled. Detection metrics show 18 of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on a single security blocklist. Threat intelligence platforms recorded its presence in nine distinct pulses, indicating prior recognition by security researchers. No associated IP addresses or subdomains were publicly documented at the time of analysis. The domain's current offline status reduces immediate risk, though historical activity warrants caution. Organizations are advised to block the domain at the DNS and proxy levels to prevent potential future reactivation. Users who may have interacted with the site should reset credentials for financial accounts and monitor for unauthorized transactions. Security teams should review logs for connections to asdqxcdsa.icu and investigate any correlated authentication attempts or data exfiltration events. Given the domain's registration recency and targeted nature, continued monitoring for related infrastructure is recommended.