wxzwkfyy[.]com

Analysis indicates that the domain wxzwkfyy.com is actively engaged in phishing operations targeting entities associated with the Chinese leather trading sector. The domain was registered on April 9, 2025, through Alibaba Cloud Computing Ltd. (HiChina) and currently resolves to the IP address 188.114.96.3. The page title, '重庆危驰革商贸有限公司' (Chongqing Weichi Leather Trading Co., Ltd.), suggests an attempt to impersonate a legitimate business in that industry, though no specific brand confirmation or detailed page analysis has been conducted to verify the exact nature of the deception. Infrastructure review shows the domain uses a Let's Encrypt SSL certificate, a common practice among both legitimate and malicious sites to enable HTTPS connections. As of July 13, 2026, the domain remains active and has been flagged by 6 of 95 security vendors in threat intelligence repositories. It has also been referenced in two AlienVault OTX threat intelligence pulses, indicating prior detection in operational security contexts. Defenders should treat this domain as high-risk. Blocking resolution to 188.114.96.3 and monitoring for connections to wxzwkfyy.com across network logs, endpoint detection systems, and email filtering platforms is recommended. While the domain exhibits characteristics consistent with phishing, the precise target—whether customers, employees, or partners of the impersonated entity—remains unconfirmed. No evidence of a specific phishing kit, credential harvesting mechanism, or malware delivery has been identified in available data. Further investigation into associated email campaigns or redirect chains may clarify the attack vector.