hnkxyq[.]com

PhishDestroy identifies hnkxyq.com as an active credential-harvesting phishing domain designed to trick visitors into surrendering login credentials. The site mimics legitimate login portals—typically those of major email or financial services—to harvest usernames and passwords. Once credentials are captured, attackers may use them for account takeovers, financial fraud, or identity theft. This domain is not a passive lure; it is engineered to deceive and extract sensitive data from unsuspecting users. This domain was flagged on seed 122631 with confirmed indicators of compromise. Domain creation occurred on February 23, 2006, indicating long-term ownership and potential for sustained abuse. It resolves to IP 111.170.173.43 and is registered through West263 International Limited, a registrar known for minimal oversight of malicious registrations. As of the latest scan, VirusTotal reports 2 out of 95 detection engines flagged the domain, leaving it unblocked across most security platforms. This low detection rate suggests the site may be newly activated or using evasion tactics. Users who have visited hnkxyq.com should immediately assess whether they entered any login credentials. If so, change passwords on all related accounts immediately and enable multi-factor authentication where available. Run a full antivirus scan and monitor accounts for unusual activity. Report any suspicious transactions or logins to your service provider. Avoid revisiting the domain and consider blocking it at the network level using the IP address 111.170.173.43. Stay vigilant—this site remains active and poses a real threat to online security.