uc-quark[.]com[.]cn

This domain, uc-quark.com.cn, is identified as an active credential harvesting phishing infrastructure designed to deceive users into submitting sensitive authentication details through fraudulent login interfaces. Analysis indicates the domain mimics legitimate service portals, likely targeting corporate or financial sector credentials, with the intent to facilitate unauthorized account access or identity theft. The use of Let's Encrypt SSL certificates further enhances the illusion of legitimacy, increasing the likelihood of successful deception. Infrastructure analysis reveals the domain was registered on June 13, 2026, through 浙江贰贰网络有限公司, a registrar frequently associated with high-risk domains. The domain resolves to the IP address 23.145.136.95, which has been flagged in multiple threat intelligence feeds. As of the latest assessment, 9 out of 95 security vendors on VirusTotal have detected this domain as malicious, with additional blocklist entries confirming its classification as a phishing threat. The domain remains active, indicating ongoing operational status. Users who have interacted with uc-quark.com.cn should immediately terminate any active sessions and revoke any credentials entered on the site. It is recommended to conduct a full system scan using updated security tools to detect potential malware or unauthorized access. Affected individuals should monitor accounts for suspicious activity and enable multi-factor authentication where available. Organizations should update internal blocklists to include this domain and its associated IP address, 23.145.136.95, to prevent further exposure. If financial or sensitive data was submitted, affected parties are advised to report the incident to relevant authorities for further investigation.