cbiqianbaoxiazairukougw[.]com[.]cn

Analysis of the domain cbiqianbaoxiazairukougw.com.cn indicates it is an active phishing site targeting digital payment wallet users. The domain was registered on March 24, 2026, and currently resolves to the IP address 154.194.143.134. The page title, rendered in Chinese, translates to 'Coin Money Wallet Download Entry - Payment Wallet | Professional and Secure Digital Payment Tool,' suggesting the site is designed to mimic a legitimate digital wallet or payment application download portal. Infrastructure analysis reveals the domain is hosted on an Nginx server with Bootstrap detected as a frontend framework. The site enforces HTTPS via a Let's Encrypt SSL certificate and implements HTTP Strict Transport Security (HSTS). These security measures are commonly used to lend an appearance of legitimacy to phishing sites. The domain is registered through Web Commerce Communications Limited, a registrar frequently associated with high-risk domains. As of July 12, 2026, the domain appears on two security blocklists: PhishDestroy and BLP-Malware. Nineteen out of ninety-five security vendors on VirusTotal flag the domain as malicious, further corroborating its classification as a phishing threat. The domain's trust score is 0/100, reinforcing its high-risk status. Defenders should treat this domain as an active phishing threat targeting users of digital payment wallets. The exact content and functionality of the site remain unanalyzed, but the combination of technical indicators—including the page title, hosting infrastructure, and blocklist status—supports its classification as a confirmed phishing site. Network-level blocking and user awareness are recommended to mitigate potential credential theft or financial fraud.