huashengbeili[.]top

The domain huashengbeili.top presents an elevated risk level as a generic phishing threat. Analysis indicates the site is designed to impersonate a proxy service, likely to harvest credentials or distribute malware under the guise of legitimate IP proxy software. The page title '花生代理 - iP代理_动态iP_全国代理iP_换IP软件_ip地址修改器' suggests a fraudulent attempt to lure users into providing sensitive information or installing malicious software.

Technical indicators confirm the malicious nature of this domain. VirusTotal detection shows 12 out of 95 security vendors flagging the domain as malicious, representing a 12.6% detection rate. The domain was registered on June 18, 2025, through Gname.com Pte. Ltd., a registrar commonly associated with high-risk registrations. It resolves to IP address 172.245.67.31, which is part of a hosting range known for hosting phishing infrastructure. The domain appears on 1 security blocklist, specifically PhishDestroy, and holds a Gridinsoft trust score of 0 out of 100, indicating no trustworthiness. The domain is currently offline, suggesting it may have been taken down or abandoned after detection.

For users who may have interacted with this domain, immediate mitigation steps are recommended. Since the threat is a generic phishing site, users should avoid entering any personal or financial information on similar proxy service pages. If credentials were submitted, they should be changed immediately on any associated accounts. Running a full antivirus scan is advised to detect any potential malware downloads. Monitoring financial accounts for unauthorized transactions is also prudent. Organizations should block the domain and IP address 172.245.67.31 at the network level to prevent future access.