977776i[.]cleansite[.]info

The domain 977776i.cleansite.info has been identified as a high-risk brand impersonation threat, specifically targeting Discord. The site was used to deceive users into believing they were visiting a legitimate PUBG MOBILE EVENT page.

Analysis indicates that 977776i.cleansite.info was flagged by 23 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicious activity. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently associated with the IP address 57.131.27.32, located in Italy (AS16276 OVH SAS). The domain was created on March 06, 2018, and has been flagged by Google Safe Browsing as a phishing site. Additionally, the domain appears on 1 known security blocklist, further validating its malicious intent.

The domain is currently offline, which indicates that the site has been taken down or is no longer active. However, the remaining risk is still high as the site has been used to impersonate Discord and could be reactivated. Users are advised to exercise caution when encountering similar domains and to verify the legitimacy of any event pages or login requests. Security teams should monitor for any reactivation of this domain and ensure that it remains blocked in their systems to prevent potential phishing attacks.