yuesais[.]cn

This domain is flagged as a generic phishing threat with high risk level and remains active as of July 12, 2026. Registered on February 25, 2026 through 腾讯云计算（北京）有限责任公司, the domain resolves to IP 180.97.68.187, hosted on AS140292 (CHINATELECOM Jiangsu province Suzhou 5G network). The page title in Chinese translates to 'climbing equipment - professional indoor and outdoor climbing equipment and skills sharing', which may serve as a decoy for broader phishing activity. Infrastructure analysis reveals the use of Nginx, HSTS, and HTTP/3, with SSL certificate issued by Let's Encrypt (R12). The domain's nameservers are alberta.dnspod.net and condor.dnspod.net. Detection data shows 2 out of 93 security vendors on VirusTotal flagging the domain, and it appears on 3 security blocklists. AlienVault OTX records indicate inclusion in 23 threat intelligence pulses. The domain is blocked by PhishDestroy, MetaMask, and SEAL, and Gridinsoft assigns a trust score of 0 out of 100. While the page content suggests a legitimate niche commerce topic, the low trust score, blocklist presence, and association with phishing intelligence pulses indicate malicious intent. Defenders should treat this domain as compromised or controlled by threat actors, monitor for associated subdomains or IP changes, and block access at network and email levels to prevent credential theft or malware delivery. The exact phishing payload or target brand has not been identified from available data; further content analysis is recommended to confirm the scheme.