scdunionbk[.]info

This domain is scdunionbk.info, classified as a generic phishing threat with elevated risk level. No specific brand impersonation or drainer kit is identified in the available data. The domain name suggests potential targeting of financial services or union-related entities, though the exact phishing lure remains unconfirmed.

Technical indicators show a VirusTotal detection rate of 11/95 security vendors flagging the domain. The registrar is TuringSign Inc. d/b/a Cosmotown, with the domain resolving to IP address 163.61.188.5. The domain was created on June 19, 2025. Google Safe Browsing status is not provided in the data, and no blocklist count is available. The domain was registered through a relatively new registrar, which may indicate lower initial scrutiny.

Current status is offline with the domain taken down. Response actions have successfully neutralized the immediate threat. Remaining risk is low as the domain is no longer accessible; however, similar domains under the same threat actor may appear. Users who previously interacted with this domain should monitor for unauthorized account activity. Infrastructure analysis indicates a single IP address and recent registration, consistent with a short-lived phishing campaign.