fc3[.]cjwoeg[.]cn

Analysis of fc3.cjwoeg.cn indicates a high‑risk, active brand‑impersonation campaign targeting Adobe. The domain was registered on 16 April 2024 by 成都西维数码科技有限公司 and resolves to IP 118.107.44.28, which is hosted in Hong Kong under AS152194 (CTG Server Limited). Authoritative name servers are ns1.myhostadmin.net and ns2.myhostadmin.net. The site presents an HTTP 301 redirect and serves a TLS certificate issued to TrustAsia Technologies, Inc. under the LiteSSL RSA CA 2025 hierarchy. The page title returned is "登入 | Microsoft Teams", suggesting an attempt to lure victims with a Microsoft Teams login prompt, while the declared brand target is Adobe. Reputation services assign a Gridinsoft trust score of 0/100 and a Scamadviser score of 1/100. The domain appears on one security blocklist and is blocked by PhishDestroy. VirusTotal records show 15 of 95 security vendors flagging the domain as malicious. Defenders should block the domain and its associated IP, monitor DNS queries for the hostnames, and update detection rules to include the observed TLS issuer and page title strings. Further investigation is required to confirm the exact phishing payload and any downstream infrastructure, but the available indicators already warrant immediate mitigation.