zxjkj66898[.]com

This domain, zxjkj66898.com, is flagged as a high-risk phishing site targeting users through a deceptive interface labeled 电子服务平台, which translates to 'Electronic Service Platform.' Analysis indicates the domain was registered on October 21, 2025, through Alibaba Cloud Computing Ltd. d/b/a HiChina, and remains active as of July 12, 2026. The site resolves to IP address 8.155.147.147 and employs technologies including Vue.js, Nginx, and HSTS, suggesting an attempt to appear legitimate while maintaining operational security. Infrastructure analysis reveals the domain is hosted with a Let's Encrypt SSL certificate, a common tactic among phishing sites to mimic secure connections. The domain appears on four security blocklists and is flagged by 14 out of 95 security vendors on VirusTotal, including SEAL, MetaMask, PhishDestroy, and BLP-Malware. Additionally, AlienVault OTX records the domain in 23 threat intelligence pulses, further corroborating its malicious classification. The Gridinsoft trust score of 0/100 reinforces the assessment of high risk. While the exact phishing kit or targeted brand remains unconfirmed, the use of a generic yet plausible service platform title suggests broad targeting, likely aimed at users familiar with electronic service portals in Chinese-speaking regions. The combination of modern web technologies and security measures like HSTS may be intended to evade basic detection mechanisms or prolong the site's operational lifespan. Defenders should prioritize blocking this domain at the DNS and network levels, particularly for organizations with users in regions where 电子服务平台 is a recognized service term. Monitoring for related infrastructure, such as the IP address 8.155.147.147 or domains registered through the same provider, may help identify additional threats. Given the domain's presence on multiple blocklists and its active status, immediate action is recommended to mitigate potential credential harvesting or financial fraud risks.