wcbnbcxyfg[.]yoga

The domain wcbnbcxyfg.yoga is identified as a generic_phishing infrastructure component designed to present a fake authentication environment. The observed page title "老虎专用微软 · 高级防红引擎" indicates an attempt to impersonate Microsoft-related services while using a Chinese-language lure interface to increase user trust and engagement. The absence of SSL certification further increases the likelihood of credential interception attempts, as secure transport protections are not enforced.

Technical telemetry confirms multiple high-risk indicators. VirusTotal reports 18/95 security vendors flagging the domain as malicious. The domain was registered through NameSilo, LLC and created on July 30, 2025. It resolves to IP address 45.204.212.94, located in Hong Kong under AS62468 (VpsQuan L.L.C.). The domain appears on 1 security blocklist, reinforcing its classification as malicious infrastructure. No SSL certificate is present, suggesting either early-stage deployment or intentionally unencrypted phishing flow.

At the time of analysis, the domain status is offline, indicating either takedown action or voluntary deactivation following detection. However, the infrastructure pattern suggests potential for rapid redeployment under similar naming conventions or hosting environments. Users who interacted with the domain should assume possible credential exposure and perform password resets on any reused credentials, enable multi-factor authentication, and monitor accounts for unauthorized access attempts. Network defenders should continue to block both the IP range and domain generation patterns associated with this campaign cluster.