jong-dcc[.]site

jong-dcc.site was registered on 17 Nov 2024 through NameCheap, Inc. The domain resolves to 107.172.61.186, an address announced by AS36352 (HostPapa) located in the United States. Infra‑analysis shows the site is hosted on Google Cloud, served by Nginx and accelerated by Google Cloud CDN. An active HTTPS service presents a Let’s Encrypt R13 certificate, and an HTTP request returns status 200 with the page title “Redirecting…”. The Gridinsoft trust score of 0 / 100 classifies the host as highly malicious.

VirusTotal records indicate that three of ninety‑five scanning engines flagged the domain, and it is currently listed on a single external blocklist. The anti‑phishing service PhishDestroy also reports the domain as blocked. As of the report date the domain is taken offline, but the hosting infrastructure remains reachable. Based on the available evidence, defenders should treat jong-dcc.site as a confirmed generic phishing infrastructure.

Immediate actions include adding the domain and its resolving IP to DNS and web‑proxy blocklists, updating email security gateways to reject URLs pointing to the host, and monitoring for any re‑registration or resurrection of the domain. Continuous telemetry on the associated IP range (AS36352) is advised, as the same hosting provider has been linked to other malicious campaigns. Because the page content has not been captured, the specific phishing lure, credential‑collection method, or targeted brands remain unknown; further sandbox or manual browsing (in a controlled environment) would be required to enumerate the payload. Until additional intelligence is gathered, the domain should be considered high‑risk and any traffic directed to it must be blocked.