rblqjcd[.]grpwj[.]cn

PhishDestroy identifies rblqjcd.grpwj.cn as a high-risk generic phishing domain, currently taken offline. This domain was designed to deceive visitors into revealing sensitive information through fraudulent means. The site displayed a "403 Forbidden" page, likely as a placeholder or evasion tactic while the phishing campaign was active.

Technical analysis reveals that rblqjcd.grpwj.cn was flagged by 15 of 95 security vendors on VirusTotal, with Google Safe Browsing specifically marking it for phishing. The SSL certificate was issued by Let's Encrypt with identifier E8, and the domain was created on April 20, 2026. The domain resolves to IP address 43.165.166.156 and appears on one security blocklist. The registration was likely through a service that provides anonymity, common among malicious domains.

Currently, the domain is offline, which reduces immediate risk. However, PhishDestroy strongly advises users to avoid any interaction with this domain if it becomes active again. Always verify the legitimacy of websites before entering personal information. If you have already visited rblqjcd.grpwj.cn, monitor your accounts for suspicious activity and consider changing passwords. For ongoing protection, rely on trusted security tools and report any suspicious domains to PhishDestroy.