haohanqianbaoappxiazaigw[.]com[.]cn

The domain haohanqianbaoappxiazaigw.com.cn is currently active and classified as a high‑risk generic phishing site targeting cryptocurrency users. Registration data shows the domain was created on May 24, 2026 through Web Commerce Communications Limited. DNS resolution points to IP address 154.194.141.195, an address hosted in Hong Kong by Starbow Ltd. The web server responds with HTTP 200, employs Nginx, serves content built with Bootstrap, and enforces HTTP Strict Transport Security. An SSL certificate issued by Let’s Encrypt (E8) is present, indicating encrypted transport but offering no assurance of legitimacy. Reputation metrics are poor: Gridinsoft assigns a trust score of 0 / 100, and VirusTotal reports 17 of 91 security vendors flagging the domain. The site appears on one public blocklist and is already blocked by PhishDestroy. AlienVault OTX references a single threat‑intel pulse linking the domain to malicious activity. The page title advertises a “浩瀚钱包APP下载 – 安全便捷的数字资产管理工具,” confirming a crypto‑focused lure. Defenders should immediately block the domain and its associated IP, incorporate the indicator into URL filtering and threat‑intel feeds, and monitor for any related infrastructure or payloads. Continuous observation is advised, as further details of the payload or credential‑stealing mechanisms remain undisclosed.