vhes-ncllulki-ncllulki-vhes[.]jindunqst[.]com

PhishDestroy assesses this domain as an elevated risk credential theft phishing site. The domain vhes-ncllulki-ncllulki-vhes.jindunqst.com was designed to steal login credentials or personal information from unsuspecting visitors, and its threat type is specifically credential theft rather than a generic scam. The site is currently offline, but its recent activity and configuration indicate a targeted and potentially ongoing campaign.

Technical indicators paint a clear picture of malicious intent. VirusTotal shows 14 out of 95 security vendors flagging this domain as malicious. The domain was registered on September 24, 2024, through Gname.com Pte. Ltd., a registrar sometimes used by threat actors for quick domain setup. It resolves to IP address 103.75.15.107, which may host other malicious domains. No SSL certificate was found, making any data submission to the site unencrypted and highly dangerous. The domain appears on two security blocklists, reinforcing its reputation as a known phishing source. The page title was "域名停靠", which translates from Chinese to "domain parking", but this likely served as a placeholder to hide the true phishing content.

To protect against credential theft from this or similar domains, users should never enter login credentials, financial information, or personal data on any site accessed via suspicious links or emails. Enable multi-factor authentication on all important accounts to add an extra layer of security even if credentials are compromised. Use a reputable password manager that can detect phishing sites by comparing the URL against your saved credentials. If you have already entered information on this site, change your passwords immediately for any affected accounts and monitor for unauthorized activity. Report the domain to your email provider and security tools to help block further access. Always verify the authenticity of websites by checking for HTTPS, correct domain names, and official contact information before submitting sensitive data.