yifenkuaisanguanwang[.]com

Analysis of the domain yifenkuaisanguanwang.com indicates elevated-risk phishing activity as of July 29, 2026. The domain was registered on June 5, 2026, through GoDaddy.com, LLC, and currently resolves to the IP address 104.21.41.120. It appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal reports that 16 out of 91 security vendors flag this domain as malicious, though the specific nature of the threat—whether credential harvesting, malware distribution, or another phishing variant—remains unconfirmed due to limited content analysis.

No additional details regarding the page title, brand impersonation, or phishing kit are available at this time. Infrastructure analysis reveals the domain is hosted on a Cloudflare IP (104.21.41.120), which may obscure further attribution. The registration age of approximately seven weeks suggests recent deployment, aligning with typical phishing campaign timelines. Defenders should treat this domain as active and malicious, implementing blocking measures at the DNS or proxy level.

Network monitoring for connections to 104.21.41.120 or related subdomains is recommended. If internal access logs indicate prior visits, initiate incident response procedures for potential credential exposure or malware infection. Further investigation into associated infrastructure, such as SSL certificates or neighboring domains on the same IP, may yield additional indicators of compromise.