028pj8[.]com

This domain, 028pj8.com, is actively flagged as a high-risk generic phishing site. Analysis indicates the page title is '验证' (Chinese for 'verification'), suggesting it may target users with fraudulent authentication prompts. The domain was registered on March 3, 2026, through Dynadot LLC, and currently resolves to the IP address 20.255.200.238. As of July 12, 2026, it remains operational and is detected by 15 out of 95 security vendors on VirusTotal, with a trust score of 0/100 from Gridinsoft. Infrastructure analysis reveals the use of Let's Encrypt SSL certificates and front-end technologies including jQuery UI, jQuery CDN, and jQuery. The domain appears on two security blocklists and has been referenced in 24 threat intelligence pulses on AlienVault OTX, indicating prior malicious activity. While the exact brand or service being impersonated is not confirmed from available data, the presence of a verification-themed page title aligns with common phishing tactics designed to harvest credentials or personal information. No specific phishing kit or campaign has been attributed to this domain based on current intelligence. However, the combination of recent registration, active blocking by security tools, and consistent detection across multiple vendors confirms its malicious classification. Defenders should treat this domain as hostile and prioritize blocking it at DNS, proxy, and endpoint layers. Further analysis of network traffic or captured payloads may clarify the exact phishing methodology or targeted sector, but current evidence supports immediate containment measures.