cscekendra[.]com

This domain, cscekendra.com, is identified as a credential theft operation targeting users of the CSC E-Kendra platform, a government-linked citizen service portal in India. Analysis indicates the site mimics legitimate CSC E-Kendra login interfaces, designed to harvest user credentials, including usernames, passwords, and potentially sensitive personal or financial data. No direct evidence of crypto drainer functionality or payment skimming was observed, but the infrastructure aligns with credential harvesting campaigns commonly deployed in regional phishing operations.

Technical indicators confirm the domain's malicious intent. The domain was registered on January 12, 2026, through GoDaddy.com, LLC, and resolves to the IP address 147.93.152.156, hosted under AS141995 (Contabo Asia Private Limited) in India. At the time of assessment, 17 out of 95 security vendors on VirusTotal flagged the domain as malicious, while Google Safe Browsing explicitly classified it as phishing. The domain appears on one security blocklist, further corroborating its fraudulent nature. The page title, 'Csc E-Kendra,' directly mirrors the branding of the legitimate service, increasing the likelihood of successful deception.

As of the latest verification, cscekendra.com has been taken offline, likely due to enforcement actions by security providers or hosting interventions. However, residual risk persists due to the potential for domain reactivation, migration to new infrastructure, or reuse of harvested credentials in secondary attacks. Users who may have interacted with the site are advised to reset passwords for associated accounts, enable multi-factor authentication, and monitor for unauthorized activity. Organizations operating similar platforms should update detection rules to include this domain and its associated IP in threat intelligence feeds to prevent future exposure.